1) Apple has a track record of rejecting App Store apps that break the law or platforms' ToS, yet conveniently leaves the Facebook app around despite the company being in breach of the GDPR since the very day it went into effect.
2) that they held out for a decade from providing granular contacts access permissions, which Facebook and other similar apps were exploiting to infer users' social graphs without their knowledge or consent.
3) most of their concerns can be alleviated by asking the user for consent and using their existing rules to forbid misleading requests for consent, citing the GDPR if necessary.
While it's entertaining to see one shit company call out another, ultimately neither are right.