There's some FUD here if I read the actual history right.
3.4.3 had no AI contributed code (in theory see below). It did, however, have some regressions that were *found* by humans using AI.
In response, Andrew Tridgell used AI assistance to rewrite the test suite, moving it from shell to python and making improvements, to cover the regressions - and his commits acknowledge this. The assertion is the AI was only used for the test suite, not for the actual rsync code. It seems unlikely to me he'd acknowledge it in the test suite but hide it in the actual code.
3.4.4 is the result that should fix those regressions, although 3.5 is also coming down the pipe with "security fixes", whatever that might be.
There's no indication that any AI-assisted coding is in the actual binary. Just good old human mistakes. Unless of course people lie about their AI use, or more charitably simply omit that data from their commits. There are no hard guarantees about code provenance, but then there never were, in any project. There's also no AI policy for that project I am aware of.
Open source is open for reasons. One of those is you have no real guarantees of fitness - so here's the code, audit it yourself. I think we sometimes forget that and take the hard work of others for granted.
