> The definition is quite clear. It does not apply when the implementation is not distributed by the same entity that creates it for example.

How can you be sure that the entity distributing the software didn't backdoor it?

> the message here is that web based cryptography has a particular weakness when it comes to things like end to end encrypted messaging

There's literally no substance about that claim in TFA.