They had this plan in place since earlier. They rolled it first to critical python libraries [1]. They even had agreement with google to provide free hardware s

They had this plan in place since earlier. They rolled it first to critical python libraries [1]. They even had agreement with google to provide free hardware security keys for free for those developers [2] [1] https://www.malwarebytes.com/blog/news/2022/07/pypi-starts-rolling-out-required-2fa-for-important-projects/amp https://www.malwarebytes.com/blog/news/2022/07/pypi-starts-r... [2] https://pypi.org/security-key-giveaway/ https://pypi.org/security-key-giveaway/