Fluffypony gives useful insights having been involved with hardening a web wallet for many years.
The criticism is well founded IMO, PWA are a security minefield unsuitable for a sensitive application like a bitcoin wallet.
This isn't to dismiss the impressive work done by the mutiny devs, the app works well and looks great. The architecture is the issue.