[kentonv]

Worth noting that in the case of this security review of Sandstorm, the customer of the review was a Sandstorm user, namely the government of Taiwan, which probably means incentives were aligned better than if we had commissioned the review directly.