Why is .net core allowing assembly access through project dependencies [duplicate]

Answer 1

So, turns out this is by design and the workaround is this:

See also this github issue