They could set a new standard. I think when it comes to security these things should be transparent. You know, documentation can say one thing and implementation another.
And to your point about documentation vs implementation, it would not be difficult for anyone, to state one thing in the documentation and produce another thing, unless perhaps, you give access to the manufacturing facilities.