even if they did publish it

They do, just not in a very public way to people outside the cryptography community, and there's no audit of course on the implementations. All of Visa's protocols are in some form in the papers published by Visa Research.