

This would be expensive, time consuming, and utterly useless.
Automated scans are going to be just as useful, if not more useful, than manual auditing. Not to mention, manual auditing is useless in 99% of cases unless you’re also submitting source code. And even then, if you offer any sort of streaming of assets, you can simply not turn on the exploit download until after the review process. That isn’t even mentioning the issues with uploading source code.
This simply isn’t an issue you can throw money or manpower at. Really, users need to be more educated, which is something valve can do.
Gotta fire all the DEI hires. Not white? You’re outta here. Not male? Outta here. Gay? Outta here.