The auditors reportedly claimed that for a hacker to gain control of a user’s iris code, they would need to control a Worldcoin trusted certificate.