[szasamasa]

technically nothing is installed, it is just bad wording and bad decision to call it install... just standalone mode with an app button

what is "installed" is js, css, html etc. files downloaded the second you go to a web site, service workers are silently "installed" before and without "install web app"...

so if your device survived the last 10-30 years having "installed" thousands of websites already then you will stay safe if your favourite monopoly after 3 years of prolonging app store revenue hit finally lets you run your website standalone and with the push of a button

you can run LastPass native clones on ios store but really, you should not run a chrome/firefox native code (from Google, Mozilla) that is governed by an open source readable js code that a service worker is?

the whole web app is a website run in standalone by the browser without browser UI and with access to some things IF you say so... and of course competition is that safari will not let web bluetooth or file picker or whatever and if people learn that another chrome feature led to this big security issue they will use safari...