I somewhat share this fatalist view, but it's still worth iterating on all of this until it's possible for the trusted party to be the user's chosen auditor instead of the vendor.

Unfortunately, the vendors have little reason to facilitate that.