To me this sounds like “I don’t want to do the thing that is obvious and sensible because I just don’t wanna.” Personal liberty? Sure. But not when your person

To me this sounds like “I don’t want to do the thing that is obvious and sensible because I just don’t wanna.” Personal liberty? Sure. But not when your personal liberty negatively impacts the rest of society. Just like how you’re not allowed to shout “fire“ in a movie theater because of the harm it could potentially cause. Your personal liberty ends where danger to others begins. If you don’t want to use 2FA on your Google account, knock yourself out. The context of Pypi is different. Yes, everybody should be using 2FA. And we should also be looking into how to perform package signing and verification. Of course we should. This isn’t your grandfather’s Internet. These are table stakes in 2022. I hope that there is a future where Pypi mandates those things because they’re good for everyone. They improve things for the entire ecosystem. I’m sick and tired of discovering that Python packages I depend on are being hacked or typo-squatted by malicious packages. Oh, and get vaccinated — because it’s exactly the same premise. Stop being selfish.