pull down to refresh

Main argument against is that it's a lot harder to do well.
E.g. is it safe to let your browser interact with your private keys?
Interact is kind of vague. Generally the browser is a less secure environment than a mobile app, e.g. xss is real and very difficult to 100% mitigate.