Yes absolutely relevant, especially in this software case. There is no requirement for mass-amounts of boilerplate code to be written here, just supposedly smart and correct cryptography and as little code as possible to do the job right... so if someone is using AI... that is a huge red flag.

An obvious sign that something is going horribly wrong in this project.

In fact i think this kind of news is enough to garner a huge influx of international hackers all targeting this package now, if they weren't already. They will be looking closely at the supply chain, phishing the hell out of the developers, physical intrusions where they can, its a hint that the developers might be stressed and making poor decisions, with huge payoff for infiltrating