I don't understand why the only instance monitoring this stuff "regularly" is Samsung itself. The ones with little incentive to actually care about the consequences or accurately monitoring this.
Outsourcing compliance monitoring and accreditation seems to have been a massive things across governments and countries. It’s got quite the track record of carnage too. We learn slowly.