>I imagine .NET developers often think this is a good thing, in regard to their ecosystem. No guessing what to use, just go with the "blessed" path and don't think about it. And, to that end, there is some obvious merit to this.

Supply chain security is important thing, especially after last years

You go with Microsoft's libraries and you don't have to care that much about some random developer receiving 50k USD for their GH account