On #2, we have carried out security audits with Cure53[0] and others, which we are happy to share. We also have a root of trust which is provably embedded in the AWS Nitro System[1]
#1 and #3 are great suggestions which we will implement in our next website revamp. Thanks!
You need to be shouting about this on your new security summary page :)
It all builds a story of trustworthiness.
It seems like you have quite a lot of info captured in your blog, but the “blog” section is definitely not where I go first when I’m doing a quick scout of a company/service to size them up (from a “can I trust these guys?” perspective).