4 is completely backwards. A native app has far more ability to spy on you, even to mutate data across your system, than a browser-sandboxed web app.
4 is completely backwards. A native app has far more ability to spy on you, even to mutate data across your system, than a browser-sandboxed web app.