Apple gets the credit for designing a bootloader that allows you to run a third party unsigned OS without degrading device security when you do boot into MacOS.
Applying the security settings per partition instead of per device is much more flexible, and you don't have to worry about Microsoft controlling which OS signing keys are valid.
It's uncharacteristic of them and better than nothing. But simply not blocking the installation of a 3rd party OS should be the bare minimum required by law. Ideally Apple would publish documentation on the hardware so it didn't have to be reverse engineered.
For the sake of the argument, the topic here is running software on general computing devices, and most people don't put game consoles in that category. Also, according to my poor knowledge of game console history of past 30 years, game consoles never intend to run arbitrary software, unless you jailbreak the device which is obviously not allowed by ToS.
Applying the security settings per partition instead of per device is much more flexible, and you don't have to worry about Microsoft controlling which OS signing keys are valid.