> If no actual security issues are found in an audit, that's good, but I want to know about the potential for them, too. That’s perfectly reasonable, and indep

> If no actual security issues are found in an audit, that's good, but I want to know about the potential for them, too. That’s perfectly reasonable, and independent from what I’ve said: audits regularly document potential weaknesses, especially when vulnerabilities aren’t found. What they don’t generally do is make statements to the effect of “this software is high quality” or “we approve of this software.”