I'm kind of suprised they don't have some sort of analytic system in place to detect this sort of thing automatically.
I hope they are working on one, as manually discovering this thing with the amount of apps/developers would be nigh impossible. The only trouble would be with false positives, so then you'd need an additional manual review system on top of that (of which one would think they're already short on reviewers anyway).