But the actual source isn't Apache 2. It's just a build artifact that's licensed this way. It's "Open Package" not "Open Source".

I can take a screenshot of Windows 10 and publish it under an Apache 2 license, but that doesn't make the Windows 10 source code "Open Source".