How are we sure administrators ourselves are testing?
A log check would prove or not prove but administrators do not have that sort of access so that is why WE can't be sure. Just have to take official CMB members words for it if any insecurities arise.