The problem with "ecosystems" is that they're usually trojan horses for vendor lock-in. It's fine to provide a comprehensive user-space, but when you start preventing people from running other stuff in their devices for dubious reasons, that's when you cross the line.

This can be done bluntly (via privileges) or sneakily (by making sure compatibility is not easy). But yeah usually ecosystems => lock-in and walled gardens.