Yep that's a huge challenge. The other one is that individual defendant's are unlikely to be able to afford the expertise needed to analyze a large complex setu

Yep that's a huge challenge. The other one is that individual defendant's are unlikely to be able to afford the expertise needed to analyze a large complex setup, even if the details of the system (e.g. source code) are made available.