I, for one, really appreciate this move. Supply chain attacks are huge problem, and package repositories are especially at risk. The options provided are very r

I, for one, really appreciate this move. Supply chain attacks are huge problem, and package repositories are especially at risk. The options provided are very reasonable, and supporting TOTP ensures that even the most hardcore privacy and free-software enthusiasts are included. As a consumer and maintainer myself, PyPI has had a fair share of issues, but this is definitely not one of them.