In order to answer all the questions in a very fluid and dynamic manner, somehow at some point you have to get your analytical inspection down to the equivalent of codelevel.
Not only that, in the United States we hire independent third-party security companies, such as EWA, to audit our products in order to certify the safety and reliability of the products at the source codelevel.