Apple also makes a mandatory API call to captive.apple.com from every device with a web view, just about every time they connect to a network.

If someone is willing to take a hardline stance that a vendor should inform the user and require opt-in consent for every type of exchange, they are going to have to run platforms specifically targeted toward that mindset.