4,000 Google Titan security keys should help to protect critical Python projects from software supply chain attacks.