> I don't mind having more DLLs if stuff just works. The counterpart is when a remotely exploitable security issue is found in that DLL, as has happened with z

> I don't mind having more DLLs if stuff just works. The counterpart is when a remotely exploitable security issue is found in that DLL, as has happened with zlib in the past and log4j more recently; then you have to chase down and update every single copy of that DLL.