As far as safety compliance goes, the manufacturer/seller must be able to produce a certificate of compliance, or at least a file number with the agency used (certificates are public information) meeting the claims such as "61010". Otherwise- the product is completely untested and considered unsafe. Who wants to use this at 600V?
It's unfortunate the expression/term "CAT xxx" is not legally protected, and thoroughly abused by Asian DMM manufacturers.
There are three ways you can overload a multimeter. You could write a book about it, there's Youtube videos too.
We've looked at the current measurement function which is protected solely by the fuses, with (OP's DMM) five diodes D1-D5 to protect the mid/high R shunts R8, R9. The fuses are not suitable past their rated 250V, or for an HRC environment like Cat. III/IV.
For overload during voltage measurement, there are no MOV's or gas tubes, only the usual diode-connected transistors Q1, Q2 SS8050 giving light protection to the DMM IC for overload.
But if you are on the Ohms/Continuity/Diode-Test function and accidentally connect to say 240VAC, something has to drop the voltage down to prevent it from burning up and here it is the PTC thermistors. This DMM features two, not sure how they are wired up. You can't put them in series.
The big question is if the cute little PTC's can take rated voltage and if they are UL or agency approved parts. UL requires the safety components to be suitable (rated voltage and current) and have agency approvals. It makes sense the parts are tested. Little PTC's are rarely good to 600V with approvals. They just do a little crack and shoot a bit of stuff.
Beyond this, the pcb spacings are untested and usually the rotary switch has a bad design and any arcing occurs there.
Just because a meter has some protective elements doesn't mean they are suitable or will even work as hoped. This is why stuff is sent out to a lab for testing and certification.