You're confusing two things:

  laxness <--> strictness scale

  carefulness/competence <--> carelessness / incompetence scale

Google tries to do this with automated processes and minimum wage drones, which results in both million dollar extensions being bump AND widespread malware being let through.