If they really believe their AI is that good and security practices and tooling that solid, why can't they automatically flag this stuff? I am sure they can, but once flagged a human has to check and that seems costly?

It probably could. But I assume with even a small amount of indirection added it no longer would be able to pick it up.

There is no AI, it's all a scam.