The dangers of web based messaging apps

This report highlights a security risk in web-linked messaging sessions (WhatsApp, Google Messages), showing that brief, unlocked physical access allows an attacker to pair a browser, persistently read/send/delete messages (including OTPs), and leave little trace once unlinked. It contrasts app behaviors (WhatsApp re-authentication vs. weaker Google Messages flow) and recommends mitigations such as app locking, using alternative user accounts for repairs, and preferring authenticator apps over messaging for MFA.