By having the subdomain, they're endorsed (possibly transitively) by whoever runs python.org. If they want to _not_ endorse whatever PyPA is doing, they need to

By having the subdomain, they're endorsed (possibly transitively) by whoever runs python.org. If they want to _not_ endorse whatever PyPA is doing, they need to not supply the subdomain.