Proof of reserves sounds responsible until you think about what it actually does.

You're publishing the exact size and location of your bitcoin honeypot on the internet.

Congratulations, you just made yourself the most attractive target in the room lol

The real answer isn't proof of reserves, it's not holding customer bitcoin at all! If a platform can't be hacked for your coins, no audit is necessary.