To be fair, I suggesed
1. What the design wanted
2. If it integrates with the rest of the product
3. How it behaves when not tested under the 'happy path'
4. How it performs under load
5. If there are any vulnerabilities
1. No, - Can't be automated, you have to read the design and check it matches the requirements
2. Yes to an extent. - You'll want to regression test the app to ensure that the changes havn't had any detrimental impact, but the first run through of the integration itself would probably need to be manual. That said, automate as you go along so you can add to the regresion pack / re-run the test on subsequent builds.
3. Probably Not. - You're looking for failures here by doing unusual things (such as resting a book on the enter key for 30 minutes to see what happens, or sitting on the keyboard (both things I've done)), document the tests yes, but automate, probably not.
4. Yes - Absolutely Yes, no other real way. But be aware of the limitations and also have someone manually test on the system whilst it is under load so you can judge how it is performing.
5. - Pen Tests tend to be scripts, but it absolutely needs human intervention to decide what to attack next.
I do agree though,
@dejongj how much / little and in what way testing is undertaken is a risk driven commercial decision. There is no way you would test an apple appstore game in the same way you would test a safety critical tool.
I'm interested, what is your involvement in testing (if you say you're a project manager, then the door is that way ---->

)