Yes for Debian Maintainers...

* Yes, they can upload crappy packages but we can ask to revoke an account.
* Yes, they can upload crappy packages but someone must sponsor the 1st upload.
* Yes, they can upload crap but a DD is advocating them. If they are smart enough to fool a DD to get an DM account then they are smart enough to fool him for the DD process.
* Yes, they can seek sponsors but finding sonsors is not that easy (At least for me).

Perhaps there's a way to identify the DM uploads so we can do more checks "not part of the process" ?