Of course I can't find the source now... In my hardening journey, I learned that installation via package manager adds an additional metric for either device or browser fingerprinting.