on ios/android apps a least the walled garden plus universal sandbox makes stealing credentials quite difficult
vs. randomly downloaded .exe files on windows being able to take everything instantly