> With languages that output a single binary by default such as Rust and Go, we would have been screwed.

no, best practices include checking in your Cargo lock file