I would prefer a dependency over a submodule (even if there's still a submodule in that dependency's own build pipeline)