#pyconus #pypi has gotten so much better security-wise over the last year. Trusted Publisher is the best
https://docs.pypi.org/trusted-publishers/