[idubrov]

They are in the same category as mobile apps in that respect, no? Both of them are "public clients" in terms of OAuth 2.0.