True, but audits aren't necessarily guarantees of anything either, and also rely on a certain amount of trust and disclosure that those being auditing aren't actively trying to game the audit.