Even if a penetration test or audit is performed, for a wallet to pass the test still does not guarantee that there are no vulnerabilities. Also, your funds are not stored on the wallet, so the wallet is not required to send or receive funds. Your wallet only stores keys, and if there is a way to compromise the keys without interacting with the wallet then you can be compromised despite taking all precautions to maximize security.