I never thought about standard library versus external dependencies in that way. I wonder why. Do you think there is a relevant difference?
The implementation depends on OpenSSH, Python, Docker and age. Highly trusted / audited / scrutinised / maintained code. This fits well with e2e messaging infra.