Honestly, I've never had a chance to tear one apart, but in your typical desktop PSU, I've not seen lower than 3.5mV. Medical PSUs can be as low as .2mV.
To reduce EMI, we tend to put a Y capacitor to ground, and that's where you get most of your leakage. But it's not like medical PSUs don't use a Y cap and say "EMI be damned!"
What's the secret sauce?