Having thought about it, it makes sense for the web browser. Though I think the app should do something to bypass it, but I realize it is probably just a browser embed.
I peeked at the source code and it’s pretty wild to see this is what JavaScript can do these day.