@zkat having been bit many a times by `cargo install` not being locked by default I feel every tool should opt to respect the dependency lockfile unless it's doing an operation that is modifying said lockfile.