save-exact is mostly useless against such attacks because it only works on direct dependencies.