When I look at CoreDNS, it has something like 573 dependencies (as reported by "go mod graph" and deduped), notably because it imports cloud libraries for AWS,

When I look at CoreDNS, it has something like 573 dependencies (as reported by "go mod graph" and deduped), notably because it imports cloud libraries for AWS, Azure and GCP. That kind of attack surface is something you do not want in a SSH daemon, or a DNS server for that matter.