I have also had painful experiences with broken APT state being quite difficult to recover from. But if you leave it up to developers of each program to update

I have also had painful experiences with broken APT state being quite difficult to recover from. But if you leave it up to developers of each program to update all their own dependencies, it just won't happen. Old versions of libraries (possibly with CVE) would stick around in the wild a lot longer this way.