The more interesting part is that security audits for the frontend did find multiple high risk security issues in the app, which have been fixed by the develope

The more interesting part is that security audits for the frontend did find multiple high risk security issues in the app, which have been fixed by the developers. But the organisation was not allowed to make a security audit of the backend. I mean the most critical part security wise was not allowed to be verified. This does not feel good.