It's true that the review process won't catch these problems, but the process increases accountability.

I'm not arguing in favor of or against reviewing though. I'm just pointing out the flaw in Hewitt's logic. There's no magic sandbox that will reliably keep an iPhone app away from the dialer. That's in stark contrast with sandbox systems like Java, where the dollar value of a sandbox break is extremely high.