Without --locked, cargo ignores the Cargo.lock file during install and rebuilds the crate with updated dependencies. This wastes time and makes builds unreproducable.