we've seen what happens when "3rd parties" audit stuff - think cryptocat... encraption :)