I think another important point is device separation in general. Vincent Haupert is talking about this in the context of mobile banking apps during the last CCC: https://media.ccc.de/v/34c3-8805-die_fabelhafte_welt_des_mob...