IMO human-verifying will always be a must, no matter how good the LLMs get. If I'm shipping code that I don't understand and it ends up having major problems, I'm still the one who's responsible for it, not the LLM.
You could ship code without understanding it, it just needs to be treated as throwaway, unreliable and potentially malicious. This is OK for some tasks, e.g. best-effort scraping of a frequently updated website that's actively hostile to automation
