> As you point out, there are alternatives.

Not if you want to build a secure system which runs on an iPhone, there aren't. JavaScript crypto is fundamentally insecure; the only secure option is a native client.