The bit at the end of the article links to a post by the UK's cyber security center exhorting library developers to consider that they are holding back clients of their library by not providing a Python 3 compatible version.
I find that amusing. I would argue much more of the responsibility here lies with consumers of libraries written by someone else to understand what that means. Partly it means the library author might stop supporting it or might not provide upgrades. Plan accordingly.