It does not really matter if CVS import happens before review and revisions or after, as long as an explicit approval is made before it is built.
Except, it doesn't make much sense to important something without review only to find out that there are legal issues or it doesn't build due to missing requirements (not included in Fedora Extras) or needs much work packaging/run-time wise.