I could get behind that process, and I don't doubt that theirs is similarly rigorous. I guess the issue is that, in the long-term, how do we know that it's still being applied consistently and that there are no security holes.

This is a much wider and rather tricky issue (how do I know that my Bitcoin exchange is performing cold storage correctly and consistently?)

You could answer: more regulations and oversight. Doesn't solve the issue.