Comment by vinceyuan

One solution in my mind is the source code of the monitoring software must be reviewed by independent and trusted software engineers/experts.