If your QA process can let known security flaws into production, then you need to redesign your QA process.

Also, no one ever said that the person generating 500 lines of code isn’t reviewing it themselves.