> Embedding a webview for an OAuth handshake provides (to the user) no additional security compared to just showing a username/password dialog. Worse yet, the

> Embedding a webview for an OAuth handshake provides (to the user) no additional security compared to just showing a username/password dialog. Worse yet, the webview is terrible UX. So not only is there no security advantage, but you also directly harm the user experience.