It took me a bit, and I believe no one has summarized this very well yet.

FBI: "You've built a device that makes it nation-state-difficult to install custom software without DRM keys. We'd like you to assist us in deploying software signed with your keys."

Apple: "That feels way too much like asking a CA to sign a cert for you, so fuck off."

I'm honestly not sure which side I'm on here.