Good point. Web views are no good. Google has introduced the new app auth libraries (for iOS and android) which are more secure.

My business partner wrote a blog about this topic: https://www.linkedin.com/pulse/webviews-bad-use-appauth-mike...