That's what Apple says. I don't think it's ever been independently audited at all; and of course to say source code is not available for the public.