Your linked article does not show that PyPI has been attacked in this way (I don't think this is really an attack, but putting that aside for a second). The wa

Your linked article does not show that PyPI has been attacked in this way (I don't think this is really an attack, but putting that aside for a second). The way PyPI does deletions is through "yanking," which is really a soft-delete mechanism. Yanking prevents usage of a particular package version for new resolutions, but allows fully-resolved versions to be downloaded. As a result, PyPI doesn't have the specific behavior that caused this (forbidding people from removing their packages because removal means hard-deletion).