Python 3.9 will go end-of-life next week so Python 3.6 is far behind in the rearview mirror. If is impossible to upgrade your build platform then it is known to be insecure.

We narrowed the issue down to the configuration in pyproject.toml not supporting directories, which is very weird. When doing a pip install -e . it should copy all the static content to the package ...