I think pre-commits are useful, but the prediction is basically "trust the client".

What if the client is compromised? Are we throwing away reviews? Should the reviewer re-run all the tests?