The Problem With Taking Down a Popular Package

I don't hear a lot of package managers having to take things down for legal reasons and at causing a big issue. Maybe it took this incident for NPM to understand that it is problematic to lead something from the registry because since then you can't do it anymore. Unless I think you can delete it time-based after you have published it or something. But also I think there would be hopefully in a situation like that, it would be like you'd only have to take down certain release, not all the releases. It seems like that's pretty rare.