> surely the canonical way to get the software these days is to pull a particular revision from the upstream repository
Surely not. A tarball of a specific release is vastly more useful for nearly any purpose other than ongoing development. Most consumers of software are not developers (or at least are not developers of everything they consume).
When was the last time you built everything on your system from sources you pulled from a VCS?