No. 2FA is a feature for pypi, and developers. The entire purpose of pgp sigs was external, it was for distributions to use.
Distributions don’t use it, therefore it’s worthless, just just overhead and technical debt.
Distributions don’t use it, therefore it’s worthless, just just overhead and technical debt.
In the cases that it is used, AFAIK it is only used by Debian's uscan program, which is sort of like the Debian version of Dependabot, it tells them when there is a new version of something to package. As far as I know, the process of packaging that new version is still manual, and relies on the maintainer downloading the package and packaging it, so they may or may not use the signature in that case.
How useful this is, is up for debate. Many years ago when I first started taking over releasing pip, that caused the pip GPG key to change, and the reaction of the Debian maintainer at the time was to just comment out the signature bit and fall back to no signature.