You can't verify the OS. You can't verify the "audit." You're taking the company's word for it, and that's dangerous. Just be careful if you're going to play in the street.