I mean what happens when a human doesn't realize the human generated code is wrong and accepts the PR and it becomes part of the corpus of 'safe' code?

Presumably someone will notice the bug in both of these scenarios at some point and it will no longer be treated as safe.

Do you ask a junior to review your code or someone experienced in the codebase?