You can load (pre) approved timesheets via XOG.
Regarding the SQL update, it is your choice but as of now (14.4), there are no downstream actions when a timesheet goes from Submitted to Approved. Still, the safest is to use a process to set the status to 'Approved'.