That is why you have merge request approvers and the merger. The work can be authored by many because each makes small contributions.

You can even have multiple protected branches where "policy makers" merge the work from their lawyer.