Bad idea

By that argument, most of the cleanup work in LibreSSL (where they ripped out dozens of crufty ciphers and obsolete options from the OpenSSL code) is wasted. If someone wants to turn on some wacko crypto feature, they'll end up using random code from GitHub (or OpenSSL itself) if the feature is no longer supported in LibreSSL. And if the option is never used, it doesn't hurt security to have it. What is wrong with this argument?

I suggest that if the objective is to eliminate bugs (in general, not just security bugs) it is just as acceptable to remove the buggy feature as to modify it to be safe and bug-free. It's better to have a smaller body of code which you can stand behind and maintain actively, with some degree of confidence that it works as described. Of course you do have to consider whether anyone is using that feature in practice; but if they aren't, kill it.

Also, if a library is included in the standard library with Python, there is the expectation that it's somehow 'blessed' by the core developers and actively maintained.