They can't, and that's the whole point. The security comes from the sandbox, not from the review process.