pull down to refresh

Agreed. It could hypothetically be fraudulent, if the organization that manages ETH makes explicit assurances about how they're going to manage it and then do something different.