Prevent certain APFS volumes from being deleted in Disk Utility.app
The answer is Parental Controls.

Below users axj and rpj both have Standard accounts. However, rpj has parental control turned on, therefore the account is labeled as Managed.



By default under Parental Controls, the Disk Utility is not an allowed App, as shown below.



The same is true for the Terminal application.

This does not prevent user rpj from using the Disk Utility, but user rpj would first have to enter the username and password of the Admin user dma. For example, if user rpj tried to open the Disk Utility application, then the following popups would appear.



If the buttons Always Allow... or Allow Once... are pressed, then the following popup appears.



If the proper username and password are entered, then the Disk Utility application will open. If Always Allow... was pressed, then the Disk Utility will be checked off in Parental Controls, as shown below.