In May 2026, Booz Allen reported that three of four Chinese coding models generated more vulnerable code when prompts identified the requester as a U.S. government customer.