Then don't include 3rd party code. What's the problem with it? If I am including shitty 3rd party stuff in physical goods I am fully responsible for the final

Then don't include 3rd party code. What's the problem with it? If I am including shitty 3rd party stuff in physical goods I am fully responsible for the final result and possible bad outcomes. Why should that be any different for web sites?