Also ignores the common vector of the maintainer getting compromised and their credentials immediately being used to push malware.
Most maintainer are going to notice that themselves.
Most maintainer are going to notice that themselves.
It will make credential attacks much harder to pull off successfully and the returns from using them will drop pretty dramatically.