2of2 with time locked transactions means you can prevent double spend and thus allow instant confirmation.

the android app doesn't update by default and the chrome app doesn't update if installed from github but otherwise you are right although the web client remains useful for watch only mode (no keys) or for small amount

these two local and open source wallet clients also verify data before signing against the electrum network.

we are also working on our api, plugins for popular open source wallets (including hardware) and a full Java desktop client using bitcoinj.

we also worked hard to make all user transactions non correlatable to users or us (instant confirmation is out of band) and are working on a bunch of interesting things on top of it