> Big business absolutely do that.

If would be true somebody would have noticed this hack before. Has been online for 2 months and they only found out because of a deprecation message.

> Of course, for the most part big business doesn't take 3rd party dependencies.

I worked for many big companies, definitively they use 3rd party deps.

> std library in-house

And that contains 3rd party deps.

Big companies have some 3rd party to check the libraries but it looks like they are not good enough because they didn't catch this one.