Debian's internal procedures are arcane for sure, I'm not involved so don't see it as issue. It's having a single authentication provider which is Microsoft that I'd object to, and that would put me off using crates.io at all.