One useful side benefit of using a private package repo is telemetry. If every dev and CI/CD machine comes with your private pypi, and you want to know where so

One useful side benefit of using a private package repo is telemetry. If every dev and CI/CD machine comes with your private pypi, and you want to know where some bad version was used, you can just check the logs as opposed to playing scanner roulette. Even if you did no scanning and literally just proxies public pypi, this would make it worth it.