Yes, but Apple wouldn't do this, because Apple is also at risk of losing customers when people get blocked by network security at work. We could also fantasize about Apple fighting all the tracking everywhere, including their own services...

Quite frankly, it's a bit silly to paint Apple as some privacy fortress, who wouldn't have to comply with law enforcement/intelligence to unmask/tap traffic. I mean, for a lot of people VPN choice is done considering legal jurisdictions somewhere far away. Apple could/would never possibly offer this level of protection.