Well, being audited means only that it is audited. Nobody forces the company/developers to act upon the findings of the audit... but still, technically it is true that they were audited even if the outcome of the audit was "haha, I wouldn't trust my used hanky on this"