For all we know they do have this system in place. But shit happens; one weekend some Hadoop nodes lock up, bunch of associated jobs fail, and maybe it's not high on the priority list to rerun the query or investigate or the person familiar with the job is away. And so this time a bunch of fraud goes uncaught.