The last few paragraphs of 16.3.2 talk about two main concerns of package restrictions being vulnerabilities and licenses. I would argue that package maintenance and longevity is also extremely important. You want to make sure any packages you do add are either receiving continuous fixes or can be expected to still work even as R and the surrounding environment update.
However, this becomes less of an issue if you are able to properly containerize your work and keep it stable.
The last few paragraphs of 16.3.2 talk about two main concerns of package restrictions being vulnerabilities and licenses. I would argue that package maintenance and longevity is also extremely important. You want to make sure any packages you do add are either receiving continuous fixes or can be expected to still work even as R and the surrounding environment update.
However, this becomes less of an issue if you are able to properly containerize your work and keep it stable.