ChromeOS devices (used to? still?) have/had something like this, albeit no warranty was voided— the device just wiped on transition between “trusted” and “untrusted”. That Apple won’t allow such a thing speaks to their motivations behind the walled garden.