Guessing it’s because it needs to go everywhere Windows is and they didn’t want to have a target on their back from pulling in a bunch of dependencies that they’d have to prove were safe. (Especially since Windows installs where this editor works may not get frequently updated, like embedded)

It might have been faster to just write the code they needed vs consult a lawyer and local security person for every crate they wanted to pull in.