I suppose it all depends on how comfortable someone is getting close to the CIA. At the very least, I think people should know who they are dealing with when signing up to a platform like that. It would be naïve to think that an organisation like the CIA funds their interests directly.
Keeping in mind of course that getting cleared following an audit means nothing was found, not that no exploits exist.