Can some folks also speak to the audit consensus on some of these? It seems with many of the newer / open source solutions, few of the end products actually got

Can some folks also speak to the audit consensus on some of these? It seems with many of the newer / open source solutions, few of the end products actually got audited by a competent external security firm / researcher, right?