Web apps can't work without at least one native app. If that native app can be installed, maintained and secured, so can the others.

The real reason is HTML/JS/CSS is universal platform to code against, unlike myriad of OS-specific toolkits.