True, but that "95% of people" part is key. The auditability of open source doesn't matter (matters less?) to non-technical audiences because they don't have the knowledge, time, and/or wherewithal to audit the code themselves. As a result, they have to defer to a third party to do the auditing.

At best, a truly independent third party auditor has a mild philosophical incentive to recommend an open-source product over a closed-source one of similar quality. In practice, it's far more common for third party "stamps of approval" to be meaningless gold stars purchased by corporations to aid in marketing their product. A great example of this is the iF Design Award.