[alanhaha]

Well, it may not be directly related with this issue, I think that it's going to be harder for individual developer. More and more things are needed to be considered.

Maybe at some point, only large enterprise can afford to do proper development.

[dane-pgp]

I worry about these second-order effects too. Is the eventual aim that 2FA will tie packages to people's government IDs (either via their phone number, or some sort of biometric system)?

Before we start gatekeeping Free Software development with a "trusted developer" system, we need to make sure that this system supports pseudonymous identities, so that people don't have to dox themselves (even to their own government) to be able to make contributions.