Regular auditing of the infrastructure" seems like a very enterprise-y thing to expect from a basic SaaS.
That's the entire point. Offer a premium service when compared to the alternatives and you get to bring in revenue.
Currently, every instance essentially makes a pinky promise that our data isn't being used maliciously. An audit provides assurances they are.