TL;DR allow me to enable a flag "disallow repository deletion"

When I try to delete a repository I get the following message

This cannot be undone. All of the repository's contents will be irretrievably lost if they are not also stored elsewhere. All pull requests to this repository will also be deleted.

This sounds dangerous and something that you don't want many people to be able to do.

At the same time we want to allow a user to create new repositories.

The closest thing I can see is to grant the PROJECT_CREATE permission but not the PROJECT_ADMIN permission. When I tried that it turned out that they automatically get the PROJECT_ADMIN permission on a repository that they just created (and thus permission to delete the repository).

Please allow an option to prevent a user from having permission to delete a repository.
An option to globally disallow repositories from being deleted would also work.