>> What’s to stop someone else from backporting security fixes as needed ad infinitum? >Who? I haven’t heard anyone express a willingness to take up that mantl

>> What’s to stop someone else from backporting security fixes as needed ad infinitum? >Who? I haven’t heard anyone express a willingness to take up that mantle. Tauthon [0] kind of fits the bill here. It's a fork of 2.7 with some backported features from the 3 branch, so they're in a position to backport security fixes as well. How well that arrangement holds up once the PSF officially drops 2 remains to be seen, but if anybody is in a position to keep providing support it's probably them. [0] https://github.com/naftaliharris/tauthon https://github.com/naftaliharris/tauthon