Define auditability. An open source codebase is auditable. That doesn't mean it's been audited. Or that the audit was competent. Or that the auditors found everything. Auditability is a property. An audit is an event. They are not the same. Don't confuse the potential with the execution.