“In one move, Apple has taken onion routing from a specialized tool for hackers to something that will be in daily use on billions of devices.”
It is not a VPN. Apple runs the first hop, an unnamed partner runs the second, and neither sees both who you are and where you went. That also means Apple has nothing useful to hand over when the subpoena comes. It only works in Safari and a few Apple apps, and you need a paid iCloud plan. Privacy is now a subscription feature.