Cracking IoT security: can LLMs outsmart static analysis tools? (EMSE, 2026)