I was once working for a project in a bank, a developer answered me to why they go app only, because “you don’t know what people do with their browser”.

It’s only about the feeling of control (and some paranoia), not about security.