I can imagine Apple probably has an automated review of a diff, and probably makes a manual review anytime a system API call changes