Why or how would they know? There's no such vetting if you want to get listed on their plugin catalogue.

This is actually business opportunity for WP/Automattic - they could introduce vetted plugins where plugin author and/or consumer pays for review service.