That seems like a really good reason not to use that ecosystem. It's not the fault or the problem of the person who created the open-source project. If you choose to use open source code in a system like that, then that's what you've chosen.