I agree to an extent. If consumer confidentiality was apart of the app then I might use it. Maybe you have the ability to disable cookies, trackers or have a masking ip through the app so then people don't spread ip grabbers and shit on the app. I'd also suggest that the app has good security (not just recaptcha v2), maybe add some anti-sniff so people have to use SSL pinning. You could maybe add custom encryption that has like 3 encryptions on one so RE have a hard ass time decrypting it. Maybe swap recaptcha v2 to arkose labs, also make 2fa compulsory (should be practiced anyways). I feel like if there were to be a c.to app, it'd be a lot more vulnerable than their site. Overall, I wouldn't use it, however, if they could prove that it's stable and safe, I'd use it.
