[zepto]

A malicious app on iOS can pose as something it’s not, and ask for your mom’s credit card number.

[gambiting]

So can a website, these sort of hypotheticals just seem like pure scaremongering.

[zepto]

Yes, definitely so can a website.

The whole point of Apps is that they are reviewed and therefore are safer than random stuff on the web.

It’s would be scaremongering if these kinds of threat were hypothetical, but of they are pretty widely known.