It's a case of "At this point, why WOULD anyone trust them?

"At no point would auditors require access to lists such as state approved concealed carry holders, nor would the CJIS Division retain information beyond what is necessary to address a specific compliance concern," the FBI continued in its statement, adding that the state has "been through this​ routine audit multiple times, most recently in 2018."

Which sounds nice, except if they're accessing who was run through it and why, they wouldn't need access to said lists.

It may be a standard, no-crap audit, and the AG and Sheriffs overstating things, but they've blown their trust to the point nobody believes it.