Dealing with internal controls, auditors of companies with millions of transactions will not test much more than if there were only thousands of transactions.
I don’t understand your second point. The size of the sample relates to the evidence collected. If yoh thinm tnesamlle size is too small then you should increase the same size.