@daveshea PDFs have two passwords, "open" and "modify". The first cryptographically encrypts the PDF, the second uses a null key so it's up to the reading software to honor any modification restrictions set. So that explains the behavior if not why Apple is deciding to set the modify password.