Very interesting. This is real-world proof that automated plugin reviews is doable for a small team. Sooner or later I'll have to learn how to implement a similar system for my own projects.

Maybe wait and see how this plays out. It's a cat and mouse, and the mice here are way smarter. Data exfiltration happens quietly.