subtracting a whole native stack from the graph
Dependency risk rarely announces itself. It arrives as a default: a client library with its optional features left on, dragging in a platform-native cryptography library and a second encrypted-transport stack through bindings that need…