It doesn't scale. If a significant portion of the user-base starts doing this, what will happen is that security issues will be discovered 7/14/X days after the

It doesn't scale. If a significant portion of the user-base starts doing this, what will happen is that security issues will be discovered 7/14/X days after they are introduced, not immediately. Because the fundamental problem is still there: nobody is reviewing the code.