It’s extremely hard to figure out whether modified software poses a security risk. I wouldn’t trust experts spending long hours to get it right, I certainly wouldn’t trust people at TÜV doing spotchecks to find the bugs.