No, this whole "any negative response to our hostile actions justifies our hostile actions" nonsense doesn't fly. It is begging the question. And you are spreading FUD again. Cabal absolutely is able to guarantee that, and always has. All you do is exactly what stack is doing, pin yourself to a specific version of your dependencies.