TAKES · Morgan answers

What should our mobile strategy be?

What should our mobile strategy be?“Native, if the phone is becoming a credential.”Morgan Reed, The Threat Modeler

💡 WHY MORGAN IS RIGHT

Some mobile products are just another screen; others hold long-lived sessions, payment authority, private data, location, camera access, passkeys or wallet keys. Native platforms offer hardware-backed storage, biometric gates, secure enclaves, keystores and explicit permission systems that can materially change the threat model. If the phone becomes part of the trust boundary, platform security primitives stop being an implementation detail.

✅ RIGHT WHEN

The app handles identity, money, sensitive data or high-authority actions.

🚩 TOO FAR WHEN

A read-only event schedule gets a six-month native security program.

See all 12 Morgan's profile