No, not really. Until there&#x27;s a standard that allows doing crypto in the browser, enforcing a higher security level for the page, and somehow verifying the hash of contents (so sites can &quot;publish&quot; an app) then web apps are basically useless for security.<p>I know this is as pathetic as &quot;why aren&#x27;t scientists working on cancer instead of X&quot;, but we have WebXXX including Bluetooth and USB, you&#x27;d think we&#x27;d have &quot;WebVerifiedApps&quot; or something. Even content-addressable URIs aren&#x27;t being allowed.<p>It&#x27;s funny, given the rise of things like Tutanota, which provide basically zero security over Gmail. (In fact, probably worse, since Google&#x27;s sec team is way better.)