Google did this right with developer mode on Chrome OS. Flip a physical interlock and your device becomes simultaneously "yours" and untrusted by Google.

Apple could do the same thing. They won't because the reason for the walled garden is revenue. The user privacy and security gambit conveniently aligns with generating revenue.