Comment by computerfriend

I have used some of your employer's software.

I do not disagree with your points, but the NCC audit is not compelling. They only interviewed engineers and didn't audit the code or how it is deployed.