I think the point is that the code path to deny network access for arbitrary apps exists (at least according to this comment):

> I also found out the Chinese version has the ability to block an app for accessing both mobile data and Wifi/WLAN data.

Yet Apple is choosing not to enable it for everyone. It seems like it would be an easy and obvious privacy win, no?