> Use a package management system, and explicit dependencies

vcpkg strongly recommends using it as a submodule. But at least that would only be one submodule.