> If a system suddenly uses an older or newer version of a dependency, you might also run into trouble.

You won't. The user may. On his system.

Aware of that. So how is that different from any other Debian package? If you rely on a certain set of packages, you are always at the end at fault. You either trust a certain base or you vet it.