Does trustd leak information about users' software usage to Apple and/or third parties?

When discussing a recent outage of Apple's OCSP server, people on various Twitter accounts (in the threads following this tweet ) and "fefe's blog " claimed that the way trustd works on macOS would leak information about which software was used when to Apple and potentially to third parties as well. I always thought that trustd only sent hashes upstream and used OCSP stapling to prevent disclosing that sort of information. Is there any reliable information out there about the privacy implications of trustd on macOS?