Some extensions have a verified/recommended by Mozilla seal of approval, so these extensions would be checked by a human to see that they comply.

Obviously they can't check every update of every extension in existence, but even just the above is an improvement and certainly not useless.

I don't think this could be enforced by the API without also seriously limiting what extensions can do, which people would go crazy about if they did.