Web being an open platform doesn't matter in any way, when the code runs on proprietary servers.

What prevents banks, etc, from doing the same with apps for open mobile OS?