The last 2 fortnightly work summaries are on Discourse:
https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-he...
https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-he...
Short version:
We have deployed a beta version of scoped upload API tokens for PyPI, and made progress on improving 2FA and accessibility, and started the audit log feature.
And we need your help to test the new API tokens feature. If you've uploaded packages to PyPI before, and https://blog.python.org/2019/07/pypi-now-supports-uploading-via-api.html makes sense to you, please get in touch with our UX researcher and designer, Nicole Harris, via https://calendly.com/nlhkabu/pypi-testing for a 30-minute structured conversation/user test.