If you check it on the project's website, it is certain that what is written there is only good stuff so that everyone can be very interesting to follow it while things that are still lacking for the project will not be written down immediately because if it is written, then investors will definitely will not approach the project.
Get audit certificates from big blockchain security audit companies is good and makes a project looks more trusted at least in term of security. However security and quality of a project are different. Quality of a project comes from the original idea that contributes on how a project will be built up.
A good idea, a good project can be compromised and we can not find any perfect company and product that have never been compromised in history. Google, Microsoft, Apple all have some types of compromise on their platforms, apps. Anyway because they are good and have strong resources, they fix issues quickly and keep moving on.