Doesn’t the average emacs user load dozens of packages? I know I do. Malware crosses my mind, but it would be a lie to say I do a fully audit of every package I use.
But you bring up a good point. Perhaps installing packages willy nilly is orthogonal to the editor choice.