Well, to be fair, they did unilaterally assign their notion of criticality to this package and based on that unilaterally imposed conditions that the maintainer did not agree to up front and cannot negotiate.
One option would be for the maintainer to never release an update for their package on PyPI going forward.
One option would be for the maintainer to never release an update for their package on PyPI going forward.