Second issue, what are the chances that I would trust some random website with my credit card information?
Why would I use a native app over a PWA if I had the choice?
Apple will reject your app from the store if you ask for permissions not necessary for it to function. It also gives the user fine grained control and awareness of what the app has access to, for how long, etc.
Some random JS app that can load in whatever it wants after the fact can make no such claim to as much security or privacy.
It's true that Apple does a better job at protecting the privacy of its users. I'm an Android user and privacy is terrible. I self-limit myself to use the least amount of native apps, using webapps and open-source apps as much as possible. For example right now I'm using Hacker News through it's web interface on my phone.