One thing you allude to which something like selector packages doesn’t address is the ability to pre-generate a dependency graph for a given environment, ie pip can fully determine the set of files with static input on any arbitrary machine.
Is this a high priority goal of the community? Or is install-time arbitrary code execution fine for the foreseeable future?