You don't need to go through everything to form an opinion. I bet they're only interested in a couple of specific points, and not a full review of every single line.

Sure, good luck finding these hotspots in a distributed environment likely consisting of hundreds if not thousands of artifacts.

You'll have to trust the developers (not the reviewers) to point out these spots and at that point the review is pointless as the developers could've told you the same thing.

It's just a security (or in this case quality) theater to make some people feel important if that's how you do it.