[bobbyi_settv]

> avoid installing native applications when you can help it

Why couldn't a web site have stolen his credentials in the same way?

[JeanMarcS]

I guess you’ll have a better chance to spot the URL is fake than in an app where you won’t see it

[andybak]

And notice that you're logged out which is unusual in many cases.

And a bunch of other potential signals that would be missing in a native app.

It's not foolproof but it's a step forward.