Supply chain nightmare: How Rust will be attacked and what we can do to mitigate

Crates.io has an API endpoint to view the published code separate from the repo link. Doesn't this address one of the concerns in the article?