[royal_ts]

I have not found any "good reasons" in the usual issues you'd find to be honest. Many of those harmful reasons are dealt with and tbh where does it differ that much from normal apps? NFC especially. Also: if there would be any issues then try find solutions for that?

[dmitriid]

> Many of those harmful reasons are dealt with

Yes, they are being dealt with because Safari and Firefox are persistent. Chrome just releases them.

> where does it differ that much from normal apps

"Hey, we know that native apps are a nightmare for privacy and security, why would you oppose making the web more like native " isn't a good argument

[danhab99]

Webapps are already protected with the same privacy and security protocols the browser imposes on webpages. What can a native app possibly do that's such an egregious invasion of privacy that a webpage can't do? Filesystems are encapsulated, hardware apis require permission, and cameras now have a nice active indicator. What can anything possibly do anymore that hasn't been fixed in all of web2?

[dmitriid]

> Webapps are already protected with the same privacy and security protocols the browser imposes on webpages.

Yes. And Bluetooth/USB etc. pierce that sandbox and communicate to devices outside the browser.

And no, you can't "fix it" with a simple "oh hey this page wants to access a device".

Hint: we can't successfully ignore prevent people from phishing sites and scammers, but sure, let's give an untrusted execution environment full access to everything.

> What can a native app possibly do that's such an egregious invasion of privacy that a webpage can't do

Webpage doesn't have full access to file systems (and Chrome wants to give full access to file systems), or to USB/Bluetooth/etc. (and Chrome wants to give full access to that), and...

Once again. "Hey, we know that native apps are a nightmare for privacy and security, why would you oppose making the web more like native " isn't a good argument".

Also, hint: native apps exist beyond mobile.

Also, hint on filesystems: even though they are encapsulated, that encapsulation differs greatly between systems, and having, say, full access to cloud files is just as bad.

[autoexec]

> Webapps are already protected with the same privacy and security protocols the browser imposes on webpages

You can disable commonly abused/exploited things like service workers and still use most websites just fine, while a webapp might depend on having that functionality enabled reducing your security when using websites and webapps.

> What can a native app possibly do that's such an egregious invasion of privacy that a webpage can't do?

Harvest your contacts? (unless that's changed)

[drcongo]

I thought I was going mad reading the previous comments. Thanks for bringing the sane.