The theory there is that apps that are not HTML webapps in an Electron wrapper are less likely to have HTML encoding bugs in fields that shouldn't be parsing HT

The theory there is that apps that are not HTML webapps in an Electron wrapper are less likely to have HTML encoding bugs in fields that shouldn't be parsing HTML special characters < > & because native apps wouldn't have HTML anywhere in their dependencies at all. I think I agree that Electron apps are more likely to have HTML escaping bugs, but I've also rarely seen native iOS apps have HTML escaping bugs, so clearly neither vulnerability nor resilience are guaranteed.