nmgsd

The value of avoiding a security breach is soooo often overlooked. Classic case of upper-middle management willing to just limp along with legacy security issues because nothing has gone wrong yet...

Although don't get me wrong.. I like what they're doing here.

Even an open-source client is hard to trust as a native install in your mobile OS. Sooo many ways your phone is insecure...

Even with perfect information and highly experienced experts, I've found that accurate estimating is so unlikely that it it's basically a waste of time to try for accuracy. Just go with a high level vague guess and keep updating that as you go. (For project/phase estimates not individual small tasks).

Nice to PATCH mentioned. Highly useful and often overlooked.

oh and 1 more:

You need to be approved any app stores to publish your web app.

This is a shockingly accurate representation of the vast majority of "Scrum" implementations.

I'll add 4. Web apps can actually offer better privacy and security than mobile apps at this point.