I spent two weeks helping a friend audit his smoke shop supplier setup last month. He had been ordering from the same distributor for a year and a half. Never questioned it. Never compared pricing. Never checked if his products were authenticated. Turns out roughly a third of his disposable vapes had no scratch-off verification codes. No QR auth