My 2 cents here is the fact that there's no right or wrong, only consistent or inconsistent. If we decide to return 404 if there are no installations, we should do the same to the other endpoints.