I mean... don't let perfect be the enemy of good?

I'm insisting that even the barest minimum of human/manual involvement solely on account signup would be a major security improvement.

It would be exhausting to have to audit your entire dependency tree like your life depended on it just to do the most mundane of things.

This isn’t about perfect vs good.

The thing you’re suggesting is outright not possible given the staffing that the Python maintainers have.