A more generous explanation is that it might be both — vendor lock-in also happens to be a security measure.

Having important info on your device and having that device accessible to the wild, wild, internet is a very real problem. If the "walled garden" is a flawed solution we should work on a better one.