There should be a log for each quality profile telling, who changed it (and what?). And a user should be forced to leave a comment for each change.
Of course this leads to the problem, that every activation, deactivation and change to a rule immediately creates a change. But usually these changes are applied by the same user one ofter another. And if this is done within a time theshold, it can be cumulated into a single log entry to clean things up.
Currently I get notified from time to time via Lint, that the rule set has changed. Usually this is only due to an installed update. But if someone actually changed the wquality profile, I want to know that.