I'm not sure open sourcing entirely solves the problem, that doesn't show how the company has the software configured. I'd suggest that you need rigorous and co

I'm not sure open sourcing entirely solves the problem, that doesn't show how the company has the software configured. I'd suggest that you need rigorous and continuous independent auditing with results published. But where do you get that these days?