To be fair, Spotify is in fact a web app wrapped into a native app shell.What's with the nonsensical fearmongering here? Are you okay there Tim? Still raging about them lower profits?
PWAs are great, and they're one of the main reasons Chromebooks became such a threat to both Apple and Microsoft when it comes to the Notebook space. Install Spotify on a Chromebook, or even the PWA from any Chrome browser, and you'll be hard pressed to notice the difference between native and PWA.
Saying that PWAs are a security risk is absolutely hilarious. Definitely straight out of the Apple "think of the kids" playbook there. The same "security risks" that are present with PWAs hold true for standard apps.
Ironically, everyone laughed at Chromebooks being just web browsers, yet here we are talking about Tim Apple making announcements about extra support for PWAs, the very thing that got Chromebooks to the level they are today.
Also, signing your message with a weird signature isn't as cool as you think it is.
As a web developer, I'd love PWA to become a thing so we can code once and deploy both on Android and iOS without using stuff like React Native or Xamarin but I don't think they will be become popular anytime soon.