Auditing code that you don't have the source to is like an order of magnitude harder. Not the same, but not way impossible.