PyPI's new security indicators and unequal access to Trusted Publishing

I read the November 6 announcement of PyPI’s redesigned project pages with some concern about the implications for projects that don’t use one of PyPI’s approved Trusted Publishing providers. I appreciate the work to improve package security and make provenance information more accessible. However, the new interface gives greater visibility to positive provenance indicators and introduces prominent warnings about missing or changed provenance. This raises a question: Should PyPI present strong...