You control the dependencies you put in Cargo.toml.
I don't put too many things in Cargo.toml and it still pulls like a hundred things
In C I've seen more half-baked json implementations than I can count on my fingers because using dependencies is too cumbersome in that ecosystem and people just write it themselves but most of the time with more bugs.
P. S.
I you don't account all the unsafe sections scattered everywhere in all those dependencies.