Security consultants / pros come in with the bias that your software is insecure. Then they strive to prove it. If they do prove it, it is verifiable. By an

Security consultants / pros come in with the bias that your software is insecure. Then they strive to prove it. If they do prove it, it is verifiable. By any other researcher pretty quickly. It is verifiable. When a professional opinionator is brought in with a bias that this data / company is racist/ transphobic / not inclusive then drafts a report proving it. It is much harder to validate it. It cannot even be evaluated as a legal argument with references (or missing reference) to laws. Ethics is inherently philosophical field. From it stems understanding and ideas that may be codified in an interpretation of them into laws. Then those laws are tested and case law and valid interpretations are formulated.