It feels like Apple's implementation leans more toward vendor lock-in than purely user protection