> a big attack surface

Wdym? At least web apps are sandboxed by default in contrast to native.

web UI is slow, this is only reason when I don't it.