MetaMask allows a user to use any Ethereum node as their API endpoint, and by default uses a professional node provider, Infura, since most users don't run their own node.

But there is no lock-in with or substantial dependence on Infura, because the private keys to your assets are stored on your own computer, or hardware wallet. The data Infura provides is public, and any node, including your own, can provide it.