Being baked in or not is a tradeoff. In this case I'd say it would better if it was in, but having a one time download from a trusted source isn't the end of the world either.
I'd make the parallel with browsers: there's an argument for them to stay decoupled from the system.