Assuming it has good functionality: it will have different bugs from the “other package”. So if someone finds a vulnerability in the other pkg your system won’t be vulnerable.

And/or you want specific functionality, like the lack of dynamic allocation.

Monoculture is a dangerous trap.