I'm not taking sides (because I don't know anything), but after reading this and Geoff Ralston's post, that's at least one good reason Smule wouldn't agree to the 3rd party audit that no one else has brought up.
Of course, I say this with a background in the quant hedge fund world and I doubt any decent fund would agree to voluntarily submit their most proprietary code to be reviewed by anyone.