> you only need to audit those specific parts because everything else is safe by default

This deserves clarification. You only need to audit those specific parts because everything else is safe IFF those parts are safe.