What is preventing a company from hiring a developer or two for very cheap to "work" on the obfuscated code, but not do any real work (or better yet, just bundl

What is preventing a company from hiring a developer or two for very cheap to "work" on the obfuscated code, but not do any real work (or better yet, just bundle it into an existing job description of a qa member or a dev on some other team or something)? How would you prove in court that the devs "working" on the obfuscated version weren't the ones doing the work? It brings into question which version is actually preferred over the other, and how do you answer that? Based off number of commits or changes on the branches? Obfuscated version could easily be gamed to have more commits, and given that it's obfuscated, it might have even more individual changes just by default. I imagine there are some companies that think these questions are worth pondering.