How would that work for closed source apps like iMessage and WhatsApp?

"3rd party audit"