This is an interesting development:
For anyone publishing packages to PyPI it seems like a no-brainer to move to this trusted publishing model. It is likely that this will be more widely adopted as it seems to address a lot of the current issues with authenticating to services like this with CI/CD workflows.