The auditor did their job. But only their job. Their job was to their client. They have no responsibility for example, to expose other illegal employment issues, or financial irregularities when they find them. Their job was not to the whole truth, but to the parts that they have been asked to investigate. They have to be discrete.