TL;DR: CI/CD does not guarantee quality by itself. It only runs the checks you design. A strong QA strategy adds the right tests at the right stage: smoke tests on every build, API and integration tests before merge, regression checks...