uv can still be redirected to private PyPi mirror, which should be mandatory from security and reliability perspective anyway.