Earlier quoted context omitted.
I wouldn't be surprised if most of the moderation is done via elaborate AI automation. Also RIP chatgpt plugnins
Tickets filed by plugin developers (including requests to publish or update a plugin) are handled by bots. The only contact I've had with a human there has been via backchannels.
But Actions will have all the same security challenges basically.