They invited security researchers to inspect their implementation of Private Cloud Compute. I expect there’d be a news story worth a good amount of traffic if they said it and didn’t allow people to do so. That there has been no such story suggests that there hasn’t been scandal.