And therefore you are ultimately responsible if any of those dependencies leaks your users data or compromises them. Just because that's how you choose to work

And therefore you are ultimately responsible if any of those dependencies leaks your users data or compromises them. Just because that's how you choose to work doesn't absolve you of those responsibilities.