Why would this be useful? vCSA is a closed appliance and you're not supported when you go monkeying around in it.
Short answer: Compliance
The end customer is required to track the software and open ports on the device with an installed operating system. An argument could be made if this is delivered as an appliance that it is closed system and only the O/S and build version matter.
Applications CAN be installed (even though not recommended) and it's important to track if that occurs.