Chamberlain MyQ did this by turning on CloudFlare Super Bot Fight and 429'ing anything that doesn't look like it came from their app. That's fine and reasonable, but I can't even pay to create an OAuth client, even though I am paying for their Tesla integration, and they provide no pathways for integrating with Apple HomeKit or Alexa.
I don't want to use a billion apps to control my house. HomeKit was supposed to solve this, but companies just won't let up.