I think informing the vendor of an OS about every program you run has necessarily a political component and is of relevance for discussion about security. It is

I think informing the vendor of an OS about every program you run has necessarily a political component and is of relevance for discussion about security. It is the first step to define the threat model and there certainly are additional threats you are exposed to. This data is highly valuable to anyone that might want to infiltrate computer systems. The technical discussion of signatures is well documented.