
Hi Aarnav, You are right that supply chain attacks are a growing concern in software development, and limiting access to sensitive APIs can be a useful mitigation strategy. Python is no exception to this and could benefit from such functionality. Your experiment with cpython is interesting, and it is great that you are thinking about this issue and contributing to the conversation. I suggest that you continue to explore this idea and potentially reach out to the Python community to get feedback and suggestions. Implementing a permissions model for Python's APIs would require careful consideration and testing to ensure that it does not break existing code or introduce new vulnerabilities. It would also need to be well-documented and communicated to the community to ensure that developers are aware of the risks and how to use the new functionality properly. Overall, I think that your work on this issue is valuable, and I encourage you to continue exploring it and engaging with the Python community.