[nzeid]

I mean... don't let perfect be the enemy of good?

I'm insisting that even the barest minimum of human/manual involvement solely on account signup would be a major security improvement.

It would be exhausting to have to audit your entire dependency tree like your life depended on it just to do the most mundane of things.

[akerl_]

This isn’t about perfect vs good.

The thing you’re suggesting is outright not possible given the staffing that the Python maintainers have.