web-first means you don't have an immutable application on your machine anymore, it's always loaded from a server on every use. They can change their terms at a

web-first means you don't have an immutable application on your machine anymore, it's always loaded from a server on every use. They can change their terms at any time and if you granted them access to a directory tree via the fileystem API they can change the code under your nose and start exfiltrating those files. Native applications can be forced to run without network access with a single command (e.g. firejail or unshare). The web is always-online.