I've summarized the last month of work on Discourse: https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-he...
Short version: we're fixing bugs found in the WebAuthn beta; we've made key design decisions for upload-scoped API keys and have started implementation; and we've started improving Warehouse's (already surprisingly good) accessibility.