mobile wise when they started doing that i quit there was no point in using android. there is always sec testing but it is not as modular as it was. there is security and then there is economic security.
on android i used to go pretty extreme and edit hosts file on a rooted phone. you can find maintained lists for it they just zero out the address. for security i would also make all the edits i wanted for different things and then unroot.
for firefox there is also script blocker with the ability to white list adresses also remove history on close.
"web apps" in web browser is fine with me and what i do now mostly. the future of it could be that they are still advertised in the store but just add on favorites and the OS could implement a web shortcut that starts in a new tab perhaps. the web has come a long way for viewing and interacting in mobile.