AT&T is an ISP, with millions of customers. I'd expect them to need a /8, or more.
Even better would be for Apple to return most of those addresses and only use a handful of /16s for its hosted services like any other business and switch the internal nets to RFC1918.