In reality if Congress wants an expert they need to have a team of engineers at the company performing audits and code reviews.

No different than a company that does due diligence before an acquisition.