To make mail hijacking more difficult, PyPI has been checking domain validity since June. In case of doubt, an abandoned email address loses its verification.

Gmail Account Security Check: Notably, Google sends you an email or notification if it detects any suspicious login activity on your account.