Then marketing comes around, asks to add google tag manager, and proceeds to make the client download 10TB of tracking librairies.

At least node_modules don't directly impact the browser.