Maybe the solution is to have no software at all. Software can't be really audited at scale, human actions can