Apple almost always get controlling rights to its developments. Why would they share rights with the manufacturer except in the case of joint development? The manufacturer gains rights to the process, however. Good luck to anyone trying to enforce any kind of intellectual property agreement in Asia outside of HK--most Asian countries never developed the Roman concept of binding contracts. Their word is as good as--nothing.

BofA offers this option in the US, as well as token key for logins. They also allow one to set a threshold for transfers that generates a requirement for token auth. (You need the token to change this, so there's no workaround). I can limit transactions to $50 (I do) with a token and no more than 3x a day without token at any valuation.
The problem is, as posters have noted, it's not the OS or the procedures, its the users. Why not teach basic computer hygiene in school?