>This sits so unwell with me, gives such limitless tyrannical & dictatorial control to a company.
Do you think Apple could get some "hackers" extradited if they don't live in the US? Its that old adage, one mans terrorist is another mans freedom fighter and some country's like Russia will point blank refuse extradition to the US as will other countries.
Any business can put what they like in their terms and conditions, those T's & C's are still tertiary to regional and state law if they are even enforceable.
Lawyers will let your put what ever you like in a contract, whether its reasonable and enforceable is another matter which only judges can decide.
Now if you live in the EU, there is nothing wrong with reverse engineering code, the EU court has ruled this https://news.ycombinator.com/item?id=28809559 but the definition of a bug can be more vague because a coder might suggest a user reported bug is working as its coded, so the coder may not see it as a bug but the user might and her you just need to convince the judge. Grey area.
Another example of what was a grey area of law was initiating an email send to an email server in order to track whether an email address existed or not. Once the status of an email address was known abort the reset of the communication. It was useful for tracking people globally, and spam filters were not that good at picking this up in the past. Anyway that process has effectively been ruled illegal by the EU now as your email address supplied by your employer has to be treated as a private and personal email address so then other personal & privacy laws come into play to make the game more complicated, but you used to be able to track people globally in businesses & military to spot when people had left an employer or been moved in some cases.
Then you have the NSA putting out reverse engineering tools for free like https://ghidra-sre.org/ making one wonder what is the point of law especially when you reproduce parts of the AT&T infrastructure in Romania? https://news.ycombinator.com/item?id=29135559
Now whilst the law might seem absolute, legislation is very intentionally left vague and its judges who make it closer to being absolute with narrow specific definitions when they make a judgement, but if there's one thing I have learnt, interpretation of the law can be surprisingly vague even by judges.
So all in all this could actually be a marketing or reputation management exercise or both involving lawyers to reassure Apple customers they have made the right purchase. Running an entity beit a business or a govt can be incredibly nuanced like playing a game of chess, and sometimes its not the initial action we need to be concerned with but the resulting action.