If you're relying on air-gaps or proxies for security, the same applies to web apps, so I don't think this advances your argument that native apps are more secu

If you're relying on air-gaps or proxies for security, the same applies to web apps, so I don't think this advances your argument that native apps are more secure than web apps - Intranets can host web apps too. Apologies for side-tracking you with this irrelevant argument about connection to the internet - I was thinking of mobile devices specifically, which are almost all exposed directly, but you're right, there is a whole class of apps/devices which are deliberately kept off the public internet.