Electron has a number of problems. First, as already mentioned, any XSS turns into much more serious RCE bug. Second, the bloat. Third, on platforms like MacOS

Electron has a number of problems. First, as already mentioned, any XSS turns into much more serious RCE bug. Second, the bloat. Third, on platforms like MacOS you're encouraged (soon required) to obtain a code signing certificate, which costs money and time and is often unfeasible for someone developing a simple app, compared to web. Finally, another security issue is/was that Electron releases lag behind the official Chrome releases (although nowadays this is much better).