pull down to refresh

Yes, it is safe in that situation. Your secret keys (wallet) are on your local machine and not a remote one. They can't drain your wallet as a result. They can't redirect your transaction to different address.
Yes they can cut your access off (which would be against their business).