Neither "the app" nor "the website" (they're the same thing) are the protocol, which is what matters.

Other applications using the protocol is not "a loophole," it's how protocols work.