TL:DR.
Auditing the income sources isn't difficult, they already do it every year. Just missing to publish like other projects do.
You insist in wanting to audit the source code, it is a pointless to audit source code running on compromissed hardware which has already beein pointed by numerous other experts including myself.
Last but not least: you insist on personal attacks. Very sus.
