At least native app forms don't look so much like the authentic website. Harder to phish, but still possible I suppose.