Were they deployed at scale in such a way that most (open and some non-free) software is packaged as such? I've never seen this happen until nixpkgs.

Every generation thinks they invented sex. And hash pinning, which now sounds dirty.