> Do iPhone users lack the ability to have control over their device by adding their own certificates?

That is correct, you cannot run software that wasn't explicitly allowed by Apple on your phone.