Another relatively popular use case is pam_ssh_agent_auth for passwordless-but-authenticated sudo. This, by definition, requires agent forwarding.

(I don't use ssh-agent, I use gpg-agent with an SSH socket - I suppose I'm fine?)