Secondly, if apple just allowed loading your own signing key it’s not like malware writers can sign their crap with their own key, and expect it to run.
b) You need to stop using the term extralegal. You agree to the terms when you first use the phone. Apple is not doing anything without your explicit permission.
Extralegal just means outside of the scope of law or a legal framework. Here apple using cryptography starting from the boot loader to effectively retain the right of exclusion regarding what code may or may not run on the ARM CPU. The sale of the tangible property should include the right of exclusion to the buyer short of a legal agreement at the time of sale allowing the seller to retain some rights. Thats why its extralegal there is no contract just apple using public key cryptography in rather hostile manner that diminishes the property rights of buyers.
Here is a simple test if you have to ask 3rd party to do something with something you “own” you don’t fully own it or your rights are diminished in some manner.
We’re not talking about going back to the old Windows security model where you were always one wrong click away from damaging other apps or the OS, or having your data stolen.