It has a mode where it doesn't touch your nginx config. That's what I use because indeed, I don't want it to mess with my nginx config.

For the rest, I'll indeed look into lighter alternatives some day. But the setup works on its own so I'm a bit lazy.

All you need is certbot and a post-hook to restart nginx.

There’s this misconception that you need extra packages to get certificates working with different software.