The grandparent asked whether they have had a security audit, and parent said "I don't believe they've had an independent security audit." Seems like a straightforward reply to those.