ok I've re-read - I think he's just talking about roles not application structure, so my comments below were off point. As a consumer, I have more faith in the

ok I've re-read - I think he's just talking about roles not application structure, so my comments below were off point. As a consumer, I have more faith in the behaviour of a browser than I do of a random app, or at least more confidence in the many eyes that will alert me to problems by browser could pose, and from that more faith in my ability to constrain the behaviour of a browser. So I would rather use a website than install a native app. As a developer, I don't trust that any request that comes to my API is an appropriate, well structured request that came from my front end code. This is why I separate back from front. My front end is my emissary to a potentially hostile land.