native apps are potentially much less secure... why don't they also remove them?