Fable is very strong for finding bugs. But you are explicitly not supposed to use it for cybersecurity. Even in the initial rollout I had it refuse and fall back to Opus when implementing a change password function