@glyph @dalias @emma @mcc yeah, this is what I assumed you meant, but not really what you wrote
I'm kind of upset about having mandatory 2FA enabled on PyPI because my software got too popular (today it's mandatory for everyone I think, but initially it was a punishment for being good at OSS) but with keepassxc's TOTP support it's fine I guess