For an insurance policy like that, they wouldn't offer any policy without auditing the device, including the code.