@ChrisWere I think it's fundamental for the app to be #FreeSoftware (thus needs to be sent to #FDroid), and even more important to make the website work entirely without #JavaScript (since its auto execution without inspection of source files and related rights information are some of many features that allow #Spectre and #Meltdown to be always a possibility still) or optionally, #FreeJS by making it follow #LibreJS markup. Also do #ProgressiveEnhancement web design strategy.