It's nonsense to suggest a person can manually do better than automated checking - by that logic, we should do away with virus checkers. It would be trivial to obscure malicious behaviour from someone reviewing it (e.g., activate after a set date or time, or based on IP address).
People don't...