It's almost as if the tech community has to learn once again centralized systems with a trusted authority at the top can't be trusted when that trusted authority makes mistakes.
Their lack of financial or other interests in the community directly explains their policies.
There's no reason that we must have a single, centralised package repository for a language and the dominant tool chain for that language relying on it by default.
I've been using it a bit, and it's really nice. Yarn (and the npm command line tool) already provide nice methods to install packages from arbitrary locations, including git repos; this provides a nice mechanism for publishing to git repos. It's a super simple solution, but then, it's not really a hard problem.