What to do about clobbering of packages in the prefix

What should we do when packages ship packages beyond themselves in site-packages. For instance if I have a package that ships itself and `requests` in site-packages that means that conda may no longer control what `requests` is installed, which could be problematic.

@conda-forge/core

edit: this effects the entire prefix and we should address all of that at once