A signed app is only more secure if they load absolutely no code remotely, otherwise they open up the same channels of attack.
That said, at least they have the option of closing that hole with the electron app.
That said, at least they have the option of closing that hole with the electron app.
Which they don't. That's why it's not a web app.