The issue is precisely that many people underestimate the cost of pulling someone else's code as a dependency.

Pulling a dependency with 1M LoC is probably more costly than writing 1000 LoC yourself.