Clear-eyed analysis of the AI–security interface with practical strategies to capture benefits and mitigate risks