Of the ~23k who are capable of opening ports...I'd estimate 10%.

20% of those can probably audit core capably for their own purposes.

0.1% of those I think ever do.

Conversely, of the folks who don't run nodes, the math is easy. 0% of them can ever audit what they use.