I presume sarcasm. Interestingly, the auditors would be taking on the risk that they've done a bad job, so their auditors are the security experts who keep find

I presume sarcasm. Interestingly, the auditors would be taking on the risk that they've done a bad job, so their auditors are the security experts who keep finding these security holes.