Comment by LPisGood

It’s auditable in the sense that there is a very high potential for reward (both reputationally and financially) for security researchers to break it.