The reason for the discrepancy is probably the lack of a straightforward, programmatic way to view the dependency graph of a C library. But they could have probably gotten a pretty good approximation by looking at Debian package dependencies (e.g., 'apt-rdepends python3-lxml').
This would massively expand the credits, but that's sort of the point here, no? (i.e., to celebrate the massive tapestry that is the open source ecosystem.)
(edit: I e-mailed Nat with this suggestion.)