That was probably me; yes, I hope I don’t misrepresent the content of this discussion when saying that explaining how getting packages from Universe works made it seem more manageable.
If I’m not mistaken, a TeX Live distribution only contains one version of each package, right? So a paper uses the package, and if the distribution between author and publisher is not matched, the result may be unexpected. That is fundamentally not a problem with how you use packages in Typst.
What can be a problem is compiler and font versions, which are not specified by the document. The compiler could be fixed by the publisher; authors can simply check what version of Typst is required. For fonts, another user fixed a missing font problem by installing the texlive-fonts-extra package. Maybe that could be used as the basis for fulfilling the “distribution” requirements re having the right fonts installed.