> People are installing banking apps that are actually from criminals.

and this identification does nothing about that, this is not to protect users. such phishing are always found on play-store alone.

The reason this happens is that greedy companies like Google have made apps the de facto way to get anything done.

There's 0 reason you should need an app to fucking pay for parking. Why do you then?

Because running mostly unsandboxed native code on customers devices is a fantastic way to steal data and build profiles. Browsers just don't cut it - they're too safe, too secure, too abstracted.

Let's be honest here - what is a banking app? Web forms, some more web forms, and then to top it off, some web forms. I mean, hell, half these apps are just web views with spywa - I mean analytics - slapped on top.

Let's not call them banking apps. They're not. They're scam apps.

The problem represented in the tweet is deeper. It is about not receiving patches which means the device is basically unsafe to use altogether.