> don’t you need to apply for all kinds of certificates to be “allowed” to run on windows and Mac these days?

Not for a PWA.