One does submit their app's source code. The issue here is that not all code behavior can be easily determined. Code can be very complex, even excessively so if the writer chooses. That's why apps with bugs can make it into the App Store to begin with-- not all bugs are found in the first place, even the intended ones. This one was designed to look like it wanted to do something innocent.