Correct, which is why Eligius is a good first step along this path, because you *can* verify that at least the number of shares present in the mysql db were generated for given round, even if you can't prove that no shares from clients were incorrectly rejected. But it's possible to do better than this *and* have increased reliability.
That's a step in the right direction.
Let's hope the major pools can join in on this