If I create a default reviewer for John Doe, and set 'Approvals required' to 1, the user can delete that user from their pull request, but John Doe is still required to approve the pull request before it can be merged.

I suggest that any user specified in Default Reviewers where approvals required is not zero cannot be deleted, and that a small lock shows up next to their name to give feedback to the pull request creator.