Yes, pushing companies away from mobile apps and towards PWAs or even ordinary websites does sound like an excellent idea.

it could be an enhanced certification like "Enhanced SEcurity" or "End to End security" to allow gradual adoption.

So like those EV certs that turn the address bar green.

	▲	tonymet 5 days ago \| parent [-]
		better, in that the app store has more weight and more leverage to establish more comprehensive auditing. The EV certs failed because general SSL identity is pretty weak. Consumers don't know how to use it to establish trust. There's no enforcement on how the names are used. for example, my county treasurer has me transfer thousands of dollars on a random domain name.