Comment by mmooss

If they can do it effectively, that would be impressive. There are so many ways phones and other devices are tracked. Do they prevent users from installing apps?

For example, I was reading Apple's Platform Security guide, a technical, detailed manual: There are so many identifiers, before any applications are installed - really, before the OS is fully loaded - that it's hard to keep track of them, manage them, or even form a mental picture of what's going on. Apple in many ways requires you to send those identifiers to them in order to use the device.

Apple is trying to protect consumers by operating the Root of Trust for the consumer devices, something consumers can't do effectively for themselves. And maybe Apple provides large customers with means to become their own root of trust; some of Apple's keys are embedded during manufacturing but other vendors allow large customers to substitute their own keys at that stage.

Regardless, it makes Apple an incredibly valuable target for highly resourced attackers, like the kind targeting the US military: Gain the right authority at Apple and you can monitor and control Apple devices worldwide. I'm not sure how the US military protects themselves without highly managed, locked down, customized devices.