The problem I have with this is that audits or court cases do not prove that the server is only using that same exact code at the instant you are using it... changes to software are constantly made all the time, and they could all invalidate previous audits or presumptions of privacy or security.