Probably nit-picky but I feel it's worth pointing out and it supports your point:

> Over 95% of the citizens have no way of auditing the integrity of the results and have to put blind faith in for-profit corporations who are (1) disincentivized from disclosing flaws and (2) do not suffer penalties when security flaws are found to be present by researchers.

It is WELL UNDER 5%, I would be surprised if quality security engineers constitute 0.1% of the population.