But that could be said about each an any dependency.

And some (very rare) companies do enforce that, everyone else has to build up a bit of trust.