If you can't audit it, you can't be sure it is sound. But you seem to claim that it isn't sound, which also isn't possible without an audit.
I think there are at least a few engineers at Apple capable of implementing this correctly. Not that I assume it's unbreakable, I'm just not as pessimistic.
> But you seem to claim that it isn't sound, which also isn't possible without an audit.
That's not quite true, right? If encryption was successfully broken, then you wouldn't need an audit. Even if it wasn't broken, there's still things like this: http://pthree.org/2012/02/17/ecb-vs-cbc-encryption/
