I think I'd be okey with semi automated submissions if they are managed by the maintainer themselves. There were a couple of security incident of long existing vulnerabilities recently. I think its fine if maintainers have a bot running making security audits to find and fix them before somebody else can use them. Of course if some human going over potential PRs.

Yeah, I agree. In practice it's difficult to tell whether or not someone used AI to help them code something (especially if they didn't just tell the LLM to do everything lmao), so it makes more sense to check whether they actually understand the code they're trying to commit. That'll keep out the slop while still letting people use coding LLM agents as a static analysis tool for finding bugs or something.