Hacker News Reader

> a big attack surface

Wdym? At least web apps are sandboxed by default in contrast to native.

Depends on which OS we're talking about.

Under which OS would a website not be sandboxed? It's the browser doing the sandboxing, not the OS.

I am talking about native applications.