I would like to know more about the review methodology and when the review is triggered. If I ask for wide permissions, get them, and then sell my extension to

I would like to know more about the review methodology and when the review is triggered. If I ask for wide permissions, get them, and then sell my extension to a malicious third party, what triggers the review?