Okay, I confirmed. With my VCS dependency in

requirements.txt

and the lockfile, it shows up in the exported venv. When I remove it and export again, it is not in the venv as expected.