I don't see the point of a wallet as PWA (like nostr:npub1mutnyacc9uc4t5mmxvpprwsauj5p2qxq95v4a9j0jxl8wnkfvuyque23vg ).

Can't the web host change the code at any time?

And doesn't this mean they can steal the funds on any update?

Unless I'm missing something on how PWAs work.

Or it's meant to be self hosted from "uncle Jim".

An of course, the same problem exists on auto-updated applications from play store.