Isn’t the threat model for these desktop apps entirely different?