I guess in an ideal world, the default might be something simple enough (akin to Gemini), and using a more flexible and complex technology that comes with all t

I guess in an ideal world, the default might be something simple enough (akin to Gemini), and using a more flexible and complex technology that comes with all the security and privacy implications would be distinguishable from the simpler sites and using them would require and allow user discretion. That might place web apps somewhere between plain websites and applications installed on the computer (or phone or whatever). If implementing your site as an app rather than using something like Gemini came at the price of making people think twice, in theory there might be an incentive to only do web apps when it's actually needed. But of course not that many people would use that kind of discretion, not to mention "ooh, shiny!" And it's hard to put the genie back in the bottle anyway.