Owners of code.
Require Code Owner approval on a protected branch -- the default branch or another.
What do the docs say?
The Groups as Code Owners documentation says:
Members in the Code Owners group also must be direct members, and not inherit membership from any parent groups.
This might require clarification. The troubleshooting section might be a great place for this.