I had an app attached to a service which required sign in to do anything on the Apple store for 4 years, and according to our metrics no one ever signed into the App Store review account you’re required to set up, which definitely backs up your theory that they’re at least sometimes just doing an automated scan of your app and hitting a button.