Well the idea is that the client should be open source, and audited.
If you run a proprietary app, you have to blindly trust it (just like if you access a webapp).
In terms of security, the best is an open source app, IMO.
If you run a proprietary app, you have to blindly trust it (just like if you access a webapp).
In terms of security, the best is an open source app, IMO.
The browser tends to be safer because it has a stronger sandbox than native apps on a mobile OS. It's meant to be able to run potentially malicious code with a very limited blast radius.
You need to audit the code. If you are not capable of doing that, you need to trust someone to do it.