> The whole 'webapp' thing exists solely on the false promise of cost savings

Tell me you know nothing about security without tell me you know nothing about security. Desktop software is a nightmare... and they can still be as bloated as the most bloated webapp.