1) Because there's very little evidence that malicious applications are successfully filtered (many get in), and much evidence that nitpicky comments keep 'good' applications waiting.
Don't know about no 1 but Google's TOS explicitly forbids the rendering of Google tiles outside a Google application, you can only use them in conjunction with Google's own Maps API.