Which is more secure on GrapheneOS? Using Gemeni in browser or as an app?

graphy00

I understand Google apps are ok to use now (they are vulnerable to user's irresponsibility in app, but don't reach into other areas of the phone) on current Graphene (thanks team), but with something like Graphene or Grok or really any online service, is it better to use the app then? and does that provide benefits using Gemeni (logged in) in Vanadium or Brave browser would lack?

KCne

graphy00 is it better to use the app then?

https://madaidans-insecurities.github.io/security-privacy-advice.html#email

Consider staying away from web apps, as they can provide weaker security. When a user visits a website in a browser, that website can target that specific user with malicious JavaScript, whereas with a native app, the code is static. Additionally, apps can offer better protection against MITM attacks by pinning TLS certificates and removing the dependency on certificate authorities. This is commonly used in apps like ProtonMail, Signal and so on. However, websites in a browser are much less privileged, as they do not have direct access to system resources. Thus, using a web app could be more secure under certain threat models.

Delaney

Using Gemini in Vanadium is more secure