Hey @Cooper01, no idea how your question sat on this forum for so long without an answer, but here's my two cents:
When you have manually triggered release automation, it is definitely best practice to designate a Release Manager role so there is one accountable person who is in charge of making sure the release gets from environment to environment and that necessary updates to the pipeline are made over time. This person might be the "lead" or they might just be any developer on the team; what's important is simply having one designated responsible party so the ball doesn't get dropped.
As far as review of what gets checked into DevOps, I mean, you can review the XML but you will miss so much in that. I am sure there are teams that do double-check the package in source, but in my opinion it is MUCH more important to be diligent with your code reviews than trying to figure out from some XML mapping whether fields on a form are in the right order.