Embedded WebViews are a way to track you:

https://news.ycombinator.com/item?id=32514793

I disable them on every app that lets me. It is in every way worse UX than simply opening the browser.

God yes that. Our VPN client fell over the other day because the auth popup opens an embedded web browser which throws a javascript error as it's bouncing through our ID provider pages. How the fuck we got there I don't know. Everything is a gigantic Heath Robinson contraption.