A theoretical case were an attacker leveraged some package hosted on PyPI could maybe become aware of investigations and destroy left-over evidence. But I guess a huge packet manager like this is too generic a target for such contraint to really work.

> How does the ethical use of this prolematic tool get ascertained?

It probably doesn't get ascertained, sadly. I think the advantages for investigations that might occur if people communicate more strategically is not worth the risk of political procecussions, which I believe are on the rise for a while now.