There are thousands of applications in the App store that implement a 'time' bomb without reading the clock. If you hide your payload in the code that runs level X of your executable, or that runs when a user gets the 'completed 100000 lines in Tetris, Apple's manual testing will not find it.

For the same reason I doubt that 'insufficient code coverage' can be a ground for not accepting a binary in the store.