Some resources like PodDisruptionBudget/linkerd-gateway, all under service-mirror-policy.yaml and namespace-metadata[-rbac].yaml are lacking that label, which is relied on by linkerd mc prune. I haven't checked for other extensions, but this should be checked globally.