but, conversely, browsers tend to have access to a lot of ident/auth goods that a standalone electron wouldn't, even if you're using containers. also it's perhaps harder to phish someone running an electron app because outside webpages open a real browser.