So I just built out some initial validation routines and discovered that DRF is doing a basic level of entity checking on our behalf (ie, ObjectDoesNotExist checks).  It returns a 400 Bad Request to the client if any PrimaryKeyRelatedField values are not present in the database.  So it looks like we're covered on that front, at least in regards to existence confirmations.