I’m not sure cargo is really the fault rather than developers who import a library just to use a trivial utility function in one place. Modern package managers solve 1000x problems and make one pitfall slightly easier. But it’s still a very easily avoided problem.