I understand that Gatsby is not the offender here and even more nobody owns this issue, so why does it seem to me that I am the only one constantly concerned about this?

gatsby cd gatsby-starter-blog 
gatsby-starter-blog git:(master) npm install

up to date, audited 2324 packages in 5s

41 vulnerabilities (10 moderate, 31 high)