I’m sure writing their own ORM would have given them instantaneous insight into this issue and introduced no other challenges. Open source developers hate this one weird trick!
Depending on what you do and the dependency's scope, either way can make sense.