Are you able to go into details about implementation, particularly around libraries used in building the iOS and macOS applications, and their pedigrees?

I'd argue that the implementation (or library) matters just as much as the standard (OpenPGP) when considering trust.