You're right, it's much easier to detect TOS violations and yet they are still failing to do so. If the description of an app is in clear violation and it still gets posted, what are the odds that they will catch an app that sends the developer everyone's contact list?