NATO RESTRICTED is not a particularly high classification. Its handling requirements are a very, very small step above unclassified.
What holds Apple back in the classified space is not security shortcomings in the platform per se, but the fact that there’s no way to initialise and manage a fresh iPad without public internet connectivity. That’s an absolute dealbreaker.
I understand that this is mainly about the Apple business where having an endorsement/certification is a barrier of entry for others, even if it's artificial.