I think it's less about using NPM as a good-practice model, and more just as an example of a widespread tool with worse flaws.

Not an excuse, just a comparison.