That's proving a negative. You are always going to end up with something like 'to the best of our ability'.

You figured it out. It's trivial to include a backdoor in a large system of systems, and one placed by a remotely competent adversary will not be found.

So what's the point of a regulation that can't be enforced?