Models already know what SQL injection and XSS are. They don't need
tutorials - they need a checklist to ensure nothing is missed.
Before: 23 individual pattern files (~100KB total)
After: 1 focused checklist (~4KB)
Same coverage, better signal-to-noise ratio for review context.