[meta] 2FA enforcement rollout

[di]

This is a meta-issue for the rollout for https://blog.pypi.org/posts/2023-06-01-2fa-enforcement-for-upload/, in rough order of priority:

• Prevent removing the last 2FA method associated with an account #13771
• Require 2FA for creating new Organizations #13766
• Require 2FA enrollment for all new users #13762
• Require 2FA to add a Trusted Publisher #13773
• Begin 2FA email campaign for 2024 requirement. #13761
• Require 2FA to accept an invite to join an organization #13768
• Require 2FA to be accept an invitation to join a project #13767
• Add admin flag to activate 2FA requirement - feat: admin flag to require 2fa #15017
• Publish 2-weeks-away blog post: blog: 2fa for pypi #15065 Add Banner pointing to post.
• Update https://pypi.org/help/#twofa language: docs: update help language for 2fa #15066
• Enable 2FA Everywhere via Admin Flag
• Publish activated blog post blog: 2fa enforced #15127
• pypi-announce@python.org
• discuss.python.org

---

Previously identified items. Evaluate whether implementation is still necessary.

• Require 2FA to manage existing Organization #13775
• Require 2FA to Manage existing trusted publishers #13776
• Require 2FA to manage an existing project #13774
• Require 2FA to create an API token #13769
• Require 2FA for creating a new project #13765
• Remove support for passwords in upload API #13770
• Require password reset for 2FA enrollment after requirement is enforced. #13763

---

Other things

• remove/change Critical Projects behavior vis a vis 2FA, since everyone will be required Remove per-project 2FA requirements #15131

[ewdurbin]

@di do you consider this closed now?

[di]

Yes!