Fully agree with this! I think today .NET is probably the most batteries included platform you can get. This means that even if you use third-party libraries, these typically depend only on first-party dependencies, making it much less likely for something shady to sneak in.
Why is .NET more "batteries included" than Java?
To me, I really like Golang's batteries included platform. I am not sure about .NET though
And now with NativeAOT, you can use C# like go - you don't need to ship the CLR.
Kinda.
With Bun I use less dependencies from NPM than I used from Nuget with .NET to build minimal apis. For example the pg driver.