It’s probably helpful that open source teams aren’t hampered by standards and 20 year outdated audit processes either.