And what would you have them do? Prevent the use of VPNs on iPhones? That would go over well.

> this wouldn't have happened by design

What design changes would have prohibited this from happening? The only changes I can think of would make it more difficult to debug things in development.

Enterprise certificates are needed for internal apps.

And you can't have Apple knowing too much about internal apps since they could reveal trade secrets or other confidential information.

It's not a simple situation to fix.

Apple has a very lucrative business where they have a sizable legion of followers who will spend almost any amount of money to own their products. They don't really need new customers, and aren't likely to convert many with traditional advertising tactics, so they just have to sit back and continue iterating on what they have to get existing customers to keep coming back for newer stuff. Basically, their business is all about draining money from their existing userbase, not expanding it.