"Freedom can be dangerous, but that's the idea": Sure, but these aren't being sold with anything like the information and insight a normal person with reasonable intelligence would require to make a judgment about the relative degree of risk. They are, by design, dangerous. They are sold sometimes in unusable, potentially dangerous or deadly form (electrocution, for instance).
The "freedom" part here isn't "dangerous things should be banned," but rather, "risks should be fully disclosed and stuff shouldn't be sold without warnings to consumers in a form that appears to be safe from a consumer retailer."
These are defective by design. No one's fun is being ruined because they can be operated safely and some people aren't.
Yes, the popular model in that price range has numerous design flaws, documented in detail at hobbyists’ sites that, if you read even passingly, should make you not think, "I can make this safe," but, "I need to bury this 10 feet deep in sand far away from my house and loved ones."
These aren't encrypted files. These are data to which they already have access (iCloud Drive, contacts, calendars, and purchases).
From some reports, Apple has always had this capability and selectively used it. The Recovery Key was something you could do on your own, but you could potentially also convince an Apple tech to escalate it and go through an identity-proving process.
What's clear is that people routinely lost or didn't write down their Recovery Key, and one has to intuit it was an ongoing problem and stress for users who enabled "two-step." In this new version, Apple ostensibly could be social engineered, but note that Apple will only engage in account recovery *to a registered phone number*. So you can't call at random, get a random CS person, and do it. You have to apply, they call back (from a team dedicated to it) and only to a number that's registered to the Apple ID account in question.
I spent many hours and many emails with a good accountant, and he advised me not to launch a Kickstarter late in the year! However, there was no better time, and I had to work around the cash-flow issue, as I describe.
The state taxation issue was my fault. I had, in fact, budgeted to spend *more* on tax than I actually owed. So I wouldn't have come up short. Based on my communication with the state, I expect that I would pay different rates on parts of the Kickstarter, and potentially pay up to about 5% to the state in tax. In the actual event, it was about 1.5%.
However, I should have better understand the issue of destination addresses so that I had properly collected that information from everyone. That's something that I've now heard from many other crowdfunding projects about, too.
Further, at least Washington State requires you pay in-state retail business and occupation tax plus sales tax on all sales for which you cannot account for the destination. That can be a huge tax bill.
With your bare hands?!?