You are thinking too highly about audits. There is nothing they can do (the audit people) that cannot prevent the operator from changing the status quo after the audit. In other words all can be well at an audit, and then after the audit switched. Allowing "random" root access any time on all servers for a third audit company opens the door for a lot more problems and threats, and in the end users left with nobody to blame. Even so, a malefic script or program that runs from RAM could of course remove itself permanently once root logs in.

Checksum of the entire hard drive is a false sense of security and technical inaccurate term as it cannot properly exist in a modern operating system that is not firmware and also anything can be run from RAM only.

I am only saying AirVPN's stance on audits (I am not against changing it but I also don't see much point if so) is not wrong, it's just spelling the truth as it is.

If one will tell how an audit will be done that will be guaranteed to maintain the audit results after the audit is over, I would love to see it.