The general advice for iphone is to use websites over apps. Im wondering if this applies to privacy-friendly apps. Or does it depend on your threat model?
Overall, yes, and using third-party clients for open protocols (IMAP, Wireguard…) is even better.
I wouldn’t use an email or VPN service, for example, if it required me to run some proprietary binary on my device.
You got it, general advice does not equate to vulnerable demographics.
Depends on your threat model. - FranklyFlawless
Depends on your threadmodel.
For encryption software (like the mentioned email providers) it makes more sense to use native applications, as its more obvious and documentable if an update gets pushed that messes with the encryption or private keys. With a website you need to trust the webserver to send the correct web application at every time.
That is also the reason I have heard for Signal not offering a web app.
For clients there is also the option for additional assurance via reproducible builds although sadly neither support that.
It’s valid for anyone in general. It all depends on the circumstances and their limitations.
This could add to the discussion? This person has a strong opinion on the matter.