In reply to Ron.

GPL software is offered with no warranty.

More obfuscation, old son. Totally irrelevant. (You seem to have a liking for using legal terminology, but seem equally to have no idea what it means.)

Many people check every single line of code, by hand, that goes into WordPress core, it has quite good test coverage, and still security vulnerabilities exist. As they do in ALL software.

Yet more obfuscation! Obviously, it's not "quite good enough". And that's hardly a reason not to improve the systems for checking. Actually, all you've done with your comments is give weight to mark k's earlier observation that WordPress's current quality control model is just broken.

"The two different checks aren’t radically different."

My point exactly, old chum. Not well designed, is it? As I said earlier, "That’s just asking for trouble."