This is a false choice, and it's worth explaining why because it's exactly where most people go wrong.
Zero versus 1000 spammy links pointed straight at a brand new domain, then yes, zero wins every time and nobody should argue otherwise. But that isn't the choice anyone experienced is actually making. The real choice is where those 1000 links point.
Point them at your money site and you have a problem. Point them at a buffer layer instead, web 2.0 properties or a few cheap domains with real content on them, and those same links do their job without touching anything you care about. The buffer absorbs the risk and passes up what survives. That's the whole logic, and it hasn't changed in ten years.
The Fiverr package is bad for a separate reason anyway. You don't know the targets, you can't control the anchors, and you can't stop it once it runs. Bad links aren't really the issue. Bad links you can't point or control are.
If someone is new and can't manage a buffer layer yet, then fine, zero is the right answer for them right now. Just know that's a temporary answer, not a rule.
