The code review opportunities are joke. The only chance to review a mere million lines of codes thoroughly is to throw a million eyes on it and open communication about findings.

The way those are done now, they are Valium for politicians and a cash cow for those doing the "audits".