Agreed with the sentiment of the author, but are teams really arguing for pulling in dependencies in the name of security?

I’ve seen the exact opposite — every dependency introduces a new opportunity for vulnerabilities, and to be judicious in pulling in new ones due to the potential security risk.