> OS provides some strong guarantees

How do you audit that ? it's not like they opensource their OS.