But without a similar audit on the alternatives proving their security, surely the most responsible action would be just to explain there is a problem and stop there.