The GDPR consent prompt they recently implemented on Google & YouTube is not actually GDPR compliant and does not offer an easy way to opt-out.
I can go on and on. I'm not saying Apple is perfect (a lot of the points you raised are valid), but it's sure as hell better than a company whose entire bottom-line is based on stalking people.