Couple of simple ideas for the zombie flag problem:
- When adding a flag immediately file a bug to remove the flag by a certain date. Enforce in code review. The bug count will surface the problem to the management.
- When a flag is past due date start firing non-fatal incidents. The incident count will also surface the problem to the management.