You’re confusing iOS, where you are in a walled garden, with macOS, where you can just do whatever the hell you want (There’s a recovery partition you can boot to where you can disable just about every bit of security that’s not hardware much like booting to grub in Linux)

There’s always DNS over HTTPS. It’s really hard to nab that shit out if it’s going upstream to the same server that’s hosting the content.

The government has literally prevented cars that prevent you from blinding another car on the road from coming to the US market. Cars come in with active LED arrays and they have to be disabled to sell in the US.

https://www.newsweek.com/nhtsa-roadblocking-headlight-technology-that-could-save-lives-1811354

From my understanding, the lead content is on the inside of the vacuum flask. Which is why it passed testing several times before someone cut it open and actually tested the inner material.