You forget another important need for system webview. It's handled differently but don't forget we've trained users to type oAuth login credentials into random

You forget another important need for system webview. It's handled differently but don't forget we've trained users to type oAuth login credentials into random browser popups. The alternative is each app adding their own (potentially malicious) web view which is hard to confirm is safe.