"We never use AI. For anything." doesn't mean "We audit every single one of our dependencies, and make sure they never use AI".
This whole thing is a matter of choice, and we shouldn't necessarily conflate the role we take when we consume/use a dependency/tool with the role of crafting own things. I, for one, can apply agency solely on things that offer me means to change them.
> Turns out to not audit dependencies