Why do we need to include the exact version of pnpm in pnpm-lock.yaml if pmOnFail or devEngines.packageManager.onFail is error or warn?

[CyanSalt]

I noticed this change #12228 was introduced in pnpm 11.5. However, it only addresses the case of pmOnFail: ignore. As I understand it, the pnpm version in pnpm-lock.yaml only makes sense when pmOnFail: download, because when it's any other value, we don't actually resolve or download a specific pnpm version.

Besides the added administrative overhead, there's another issue. When I execute pnpm install, the lockfile records the current device's pnpm version. If software information is part of personal data, this operation actually carries a certain privacy risk.