UPX is great for onedir builds but both UPX and onefile use zlib compression so using both simultaneously won’t accomplish anything. The OpenSSL stuff (libcrypto and libssl) are optional components of Python so if you were really determined you could compile Python itself from source with those components disabled then run PyInstaller but it’ll be a lot of work.