Agreed - how else was the DOJ supposed to do their job? They clearly need the data for an investigation. No need for PyPI to give information about how current users can alter their accounts to thwart future requests.
Exactly. I guess the transparency is nice but at what point are you potentially helping someone cover their tracks who may or may not actually deserve that help?