Bad for privacy. Web clients are fine because the key is protected by the extension, not the client. Native clients have to protect the key in their own ways. So, if an attacker knows that the person has a key in a native client, it might look for ways into that specific client's database.