> "May contain" doesn't provide legal protection

Yes, this causes problems.

> and then if you make it a standard there needs to be testing for compliance

Why would there need to be any additional testing? If anything I'd expect "may" foods to need less testing than an accident-prone "no" food.