It does seem random - I have submitted apps multiple times, and provided demo credentials for them to use (the app is gated, so you can't do anything without an account and logging in first).

In 80% of the cases they never even logged into the app before giving us the OK (all logins and actions are logged, so it is easy to tell)