A bank in India has sent me a bank statement email (meant to be sent to their customer).
Ignore that they sent potentially sensitive information to a stranger.
The statement pdf is password protected.
And the email says the password is first 4 letters of his name and last 4 digits of the account number.
Both the name and account number are given in the email.
Q. So what did the password achieve?
A. Bank grade security!
Whatsapp on the web browser encourages to download the app, making disingenous claims that the app is faster and as if it is impossible to do such calls within the browser. Most probably the "app" is the same code that runs in a browser but wrapped within electron. And by being able to run outside of the browser's sandbox (being an app), it can access more of your system and gather more personal information.