> This feels like it could be solved with a list of permissions that the user has to turn on when using 3rd party AI.

Nah, that just shifts the goal posts. If they did that, developers would be whining about "scare screens", as we have already seen when Apple put app installs behind a permission prompt.

They're already up in arms about the requirement from Apple (and Google) to know who is behind the apps that slurp up all your data.

The DMA maximalists won't be happy until Apple releases an anonymous service to automate setting up a Kafka topic to send each iOS user's PII to whoever wants to receive it.

You can downloads millions of things for your computer without kyc protocols. Why are phones in a special class? Your data is being slurped by the people who sold you the phone and you are worried about the small fish.