How is Facebook supposed to know how they configure/limit/audit their servers? Are they just supposed to take their word for it? Cambridge Analytica said they

How is Facebook supposed to know how they configure/limit/audit their servers? Are they just supposed to take their word for it? Cambridge Analytica said they weren't abusing their access, too.