Today the Delete permission does not cascade from the Opportunity to the Opportunity Product.

Therefore someone with no delete access to the Opportunity can still delete the Opportunity Product. We need to have the Opportunity Product inherit or have their own CRUD to enable this use case