This is what pip does — whereas we rely on the autoinstaller just getting triggered when necessary. But if the package just tries to introspect it (or entry points) via importlib.metadata, it'll find its requirement uninstalled. Historically we've worked around this by continuously adding things to `implicit_deps`, but that doesn't really scale — we should just migrate to always installing what a package defines as a requirement.