I assume you're enough of an engineer to know that building an SSO service like this takes a lot of time and energy. Third party apps are exploiting loopholes in the system and Apple is closing those loopholes one-by-one. I don't think this is unnatural. No one has foresight.
So are you arguing that Apple hasn't known about privacy violations by third-party apps in their store?
Given that Apple is announcing patches for these loopholes, it must have been working on them for at least months, if not years. But searching "apple privacy third party app" shows nothing before late May, 2019. Maybe I missed something, and if I did, please share.