No easy way to remove the package.
"pip uninstall" has been around as long as pip has.
Theoretically, it can upgrade the version but the user mostly don't.
In practice, people deploy to a virtualenv that gets recreated on each deployment, and tend to treat a virtualenv as an ephemeral thing.