Don't agree with your interpretation of what the original author is trying to convey. It's not about the rules of the package distribution channel has. It's ab

Don't agree with your interpretation of what the original author is trying to convey. It's not about the rules of the package distribution channel has. It's about the fact that they have different rules for different levels of popularity. If everyone needed to do 2FA fine. Don't want to do it? Guess you'll distribute your code another way. But... You can use it and we're going to gladly take your free work and host it and in the process benefit from it (look! It's so simple publishing stuff! Use us) until the liability of hosting you becomes greater than the benefit of hosting you. At that point we need to pull out the adult rulebook and teach you how to properly do things. So to me it sounds like the distribution channels want to have their cake and eat it too while passing the work to the developers,ie the people that made the distribution channels successful in the first place.