@mhoye At my workplace, we build complex industrial systems with high safety requirements (aka trains).
To meet these requirements, we use lots and lots of processes and tooling. None of it involves individual developers examining dependencies.
That guy is not a serious person.