Honestly, Homebrew is so healthy[1], and modern Apple is so corrupted by greed, that I'm sure I don't want Apple to try to Sherlock it. Can you imagine? To get a package published, you'd need the developer subscription, and Apple would block any package that threatened any of their revenue streams. Not to mention that they'd probably want to also run the scan the MAS does to ensure you're not using any "private APIs." No thanks, Apple has no role to play here.

[1] (Personally, macports hasn't been my jam in decades)