> Apple could easily have locked it down in exactly the same manner as their iOS/iPadOS devices

Yes. That is in fact the problem. They shouldn't have the ability at all. Given the ability it will be done, it is only a question of when and why.

Corps have this ability already and are building in tech to make circumvention even more difficult. We are one update away as it is now.