> In general, this embedded webview seems very easily spoofable to me, but that’s a separate problem. Both Android and Apple have determined this is the most se

> In general, this embedded webview seems very easily spoofable to me, but that’s a separate problem. Both Android and Apple have determined this is the most secure way to auth against third parties. It’s the standard way to sign in with oauth etc. Which I also despise.