2 ms·

I get from this that the thing Apple did right wasn't preventing other install sources, but rather that they control all their updates.