@stefan2410 Regarding security, I’m not sure what you mean. PWAs, even when installed, are sandboxed. They are granted more resources and API access, but still fall under the security model of the browser in many respects. They also require HTTPS, which protects against most Man-in-the-Middle attacks.
On the topic of sites with mobile-focused UI, some might technically be PWAs, but they may not function well on desktop. Ones that are responsive, like Starbucks’ new PWA, work brilliantly on both mobile and desktop.