[MattRix]

It uses github auth, it’s not some complex process. I can see why they would need to require accounts so it’s harder to abuse it.

[arcanemachiner]

After all the bellyaching from the HN crowd when PyPI started requiring 2FA, nothing surprises me anymore.