wonders how much compromised code from india / middle east is being run by u.s corporations for the u.s. government under certified programs. surely there is confirmable checks and balances on this?