The current situation seems untenable long term. I feel like there’s a possible path forward that could be both more secure and less work.

Instead of approving plugins, approve plugin authors.
Run WPCS on all plugin updates automatically.
If they fail to pass WPCS, the plugin temporarily becomes unavailable. Once they pass, the plugin becomes available again.
WordPress sponsors the WPCS project.

WordPress Coding Standards Maintainer Warns Maintenance Will Be Halted Without Funding: “This Is an Unsustainable Situation.”