Hacker News Reader

There is no executable hash in the request, so I don't understand why you bring it up

Developer certificate IDs are almost a 1:1 match with which app you’re running.

To use one of the original examples, how many different applications are signed with the developer key of the Tor browser project?

I don’t know the answer to that, but I would assume they are all Tor related so that tells me everything I need to know about a user anyway.

There are also notarization requests, and those transmit more than enough information about your executable.