They do, it’s called Radar, and if you ever see a URL beginning rdar:// it has to due with their issue tracker. (Outside devs can submit to Radar, but not read it; if you want other devs to see it, submit it to third-party-run OpenRadar as well.)