I had the exact same ideas when I first read the exemption, but realized that in practice, that's not at all an issue since even for DCO exemption PRs we still go through the full review process. :)

This is just the "first defense".