Do they publish their protocol or how it works anywhere? Their site didn’t seem to have much technical info at first glance

You should also ask for a copy of the pictures or videos it takes while scanning so you can reference when returning.

If it makes you feel better, I’ve dealt with so many servers where someone ran chmod -R 777 / thinking it’d solve all of their permission issues.

But that’s also something easily programmed/scripted. How would you tell the difference?

I dont remember the name of it, but there were tools that could store issues inside of git. It’d be hard to keep it in sync with everybody without a central repo, but maybe not much harder than keeping the code in sync too.