Least Authority's blog post about the audit: https://leastauthority.com/blog/least_authority_performs_sec...