For example large part of IT professionals which contacts our support (https://poste.io) don't get difference between SMTP envelope and from/to headers.
Heck, like 95% of open source fails in that regard. Hell, anything Linux fails (even though progress has been made, it falls halfway short still)
You'll usually only learn about this after getting bitten by a bug in an auto-updated dependency and at that point you'll learn to manually pin your dependencies and use commands such as `npm ci` instead of `npm install` in your build pipeline.
As such, navigating around the NPM world is anything but easy. There are razor sharp edges and footguns lying around everywhere, just waiting for you to use them.
That's a dubious remark. Even proprietary software most of the time fails at being easy. Easy takes great design and most software out there falls into the average.
Take Blender which was terrible for years and years, but changed happened because the projects they did allowed them to work with professionals which could point out shortcomings.
Or GIMP, its UX is terrible still afaik.
Or lets install Linux, as long as it takes a considerable expertise and doesn’t come preloaded, people won’t switch.