Every single player, no matter what rank or Op can /pvp disable, so players can just remove the PVP protection from any new player and attack them.
There is no permission node, and this should not be given to all players by default, this should be OP only and then permission to use.

They can remove protection for themselves... not others afaik