You would, but that doesn't help you until someone figures out that it is malicious. This lets you track who has actually verified that the package is not malicious.

Well, because that itself would become another attack vector. You need some sort of post-review after something is flagged malicious to prevent arbitrary take downs.