This is self-evidently false. Even casting it as something like, "security audits do not ensure security sufficiently to be worth the cost and effort" is incor

This is self-evidently false. Even casting it as something like, "security audits do not ensure security sufficiently to be worth the cost and effort" is incorrect. You can certainly get an auditor who is green, incompetent or has their own agenda. Welcome to humanity. But on average, they do more or less what they're supposed to do.