You joke, but I see this as "why is this implemented as software that potentially violates the security of my device?"

I trust the browser sandbox a million times more than I trust the phone app sandbox.