Being required to use an Android app sucks and is annoying, but an AOSP VM would solve the issue. Perhaps MITM-ing the app would be harder than MITM-ing a site without reversing the app. And not everyone has the hardware resources for an Android VM.

But for me the main issues with "you need our app" BS is that they don't give you the apk but tell you to download it from the Google Play Store. They don't give you the source for the apk as well, as if it's such a huge trade secret how some shitty API works. The worst offenders ask for all the attestation shit (unrooted phone and so on). That's what's wrong with apps vs sites, not just the format itself. We should fight for FOSS apks with no attestation if companies want to invest so heavily in apps.