“Today, for every 10 packages fixed, a completely new ecosystem emerges with the bad security practices at its central point.”
Shared libraries let a distro patch one file and fix every program that uses it. Go and Rust bake each dependency into every binary, pinned to whatever version the author tested. One bug in a popular crate now means rebuilding hundreds of programs. Developers got reproducible builds. Users got slower security fixes.