- Write emails to companies that provide desired services that way suggesting they make an actual application.
- Revoke all JS execution permissions from all domains that are not verifiably in control of only the company running that web app.
- Audit your use cases and try to find native applications that can fulfill them instead of web apps.
- Try not to use web apps on domains that you have no control of.
- Treat every domain trying to get you to execute random code like you would receiving a .exe in the email from a similarly unknown person or address.
The idea that most native applications collect more information than web apps is false. It is only true in the very restricted domain of smartphones. It is obvious to everyone in practice and in law that users of smartphones do not own them or control them and will not be allowed to. The problem is the smartphone, not native applications. Giving up even more control and ceding everything to a remote web service, will make this worse, not better.
And yes, copying this article's structure for my response is intentional parody.