They go back through older plugins too. We have a plugin that had not been updated in over a year but is over 3yrs in the repo. Mika emailed me when she found a non sanitized use of a $_GET value in display code, fixed it.. Went on our way.

They are doing good work over there..