That's not really how I see this going. Probably the play will be along some "protected private PyPi" or vetted packages or something. It won't just be the uv binary.