At least I know of the proxy-injector's mutating webhook config which is not labelled so.

This allows to act on all Linkerd resources as a whole through label selection.