You can trust a single big stdlib more than the 100 dependency that tokio pulls at any given time.

Yeah then you can version lock changes to one thing post-evaluation vs or even easier as noted above, download the stdlib and host it yourself.