Agreed. I would use it, unless it was made by Facebook, Amazon, Google or Apple.
Stupid thought - technically couldn't any implementation include some sort of deliberate covert stenographic key? Granted that would likely be more "narrow down the implementation" without it being detectable via hashes per instance output.