I'd trust the SEC that one other agency capable of doing so. The SEC actually has a ton of technically capable people who understand and audit technology...they

I'd trust the SEC that one other agency capable of doing so. The SEC actually has a ton of technically capable people who understand and audit technology...they do as much for e-brokers, stock exchanges, high frequency traders, etc. The only other agency capable of doing so would probably stockpile the exploits and use them to surveil the dark web to catch a million drug dealers and an occasional low level disposable terrorist.