Tesla did not create, nor "owns" the API. And if the API is open such that anyone can use, it seems the developer does have permissions to use the API. If we require that every single entity between a mesh of APIs and all of the data or systems they control must give permission, this is simply unworkable. It's APIs all the way down.

Frankly, this is Apple arbitrarily choosing apps they don't like and findng a loophole to block it.