This is true, but you can inspect the package (and its dependencies) once installed and before importing it. Now it is an all manual process (with default tools, as far as I know), which contributes to the current state that only very few people inspect their packages.
It can give people also a second change to notice, e.g. the typo in the package name.
It can give people also a second change to notice, e.g. the typo in the package name.