pull down to refresh

You are getting at exactly what I was thinking.
Two points though:
  1. while most people hopefully are using something else as their cold storage, they might frequently use such devices as watch-only wallets, and as such they might be using them to generate receive addresses for their cold storage.
  2. my second point is that bitcoin-specific machinery may be more likely to get attacked. Or at least it is more likely to be a target.