Oh yeah EU certifications are sadly super weak. Now to your original point, I think it's quite possible to have an open review system. Linux and the likes have shown great capabilities in finding and fixing issues fast. With a national effort to ensure paid engineers it's not science fiction.