Report from the US Government Audit Office finds developers are not always entirely honest about the risks and limitations of their creations.