> but they seem to have a real security and privacy concern on this issue

That's always how they spin their FUD. They already have an app sandbox in place for all fo their apps. Sideloaded, PWA, or not.