Website injections, Google search to find the website address and ending up on a fake site rather than simply typing it into the address bar, etc. So many. Apps don't sidestep all of them but enough to be an easy recommendation.

PWA would work here as well.

I disagree, ads and web injection would be a worry.