I'm beginning to think that the only reason code reviews still exist is that "all changes are reviewed before going into production" is probably a checkbox on some security certification checklist.