First of all you can deploy everything together, just like people ship their whole computers with containers.

Secondly anyone accessing Maven central directly is doing it wrong, the repo should be internal, validated by IT and legal, so for the consumers it doesn't matter how the JAR got there.

In a way it is ironic to see the whole containers/WebAssembly ecosystem redoing Java App Servers, 20 years later.