This study from Stanford shows that people who use GitHub copilot produce code with more security flaws than people who don't; it's roughly the same size as the study GitHub keeps quoting saying it makes developers faster. https://www.theregister.com/2022/12/21/ai_assistants_bad_code/
Study finds AI assistants help developers produce code that's more likely to be buggy

At the same time, tools like Github Copilot and Facebook InCoder make developers believe their code is sound

The Register
@seldo can't say I find it surprising. If the user isn't scrutinizing what it generates (and I'd guess many aren't), it's really not so different from copy/pasting directly from StackOverflow. We all know how that goes.