I usually use on cascade delete, but restrict does seem safer/more conservative.