Their vaunted "cyber security audit" from Dekra is just a checklist exercise against the OWASP Top 10.