On the author of the single vulnerable library instead of the hundreds of authors of projects making use of it, yes please. The fact that things like flatpak,

On the author of the single vulnerable library instead of the hundreds of authors of projects making use of it, yes please. The fact that things like flatpak, snap, nix all explicitly try to address this problem with platforms/base layers/grafting etc. is very telling. They are all a trade off of your security vs. the dev's convenience, which might be necessary to succeed.