This is expected behaviour but I agree the error message should be improved. There are people using interpolation in .pypirc, if you don't want that, just use a double % sign and it will do the right thing. You don't have to change your password.

I'll leave that open to find what's the source of the exception and maybe add a more helpful message there.