One wrapper cuts API churn, but it also widens the supply-chain blast radius you own.