We use user agent histogram as a security litmus test on our payment sites. If we see a spike of a smaller set of user agents without increased traffic (or a longer ‘tail’), we can almost be certain that something shady is going on. Not super useful as in, we can’t just block every legit looking user agent, but it notifies the analytics team that can then dig deeper.