Not that I have a vested interest in this, but I would make a new permission for the approval purpose since it is not the same as the permission to administer the package nor is it the same as write permission.
You could hypothetically have a legal team who had to approve all posts but had no permission to admin the package or create /write anything.
