No. The browser (which is the runtime that pwas use) is already a very limited environment with little to access to the system - and if the app wants to access something potentially sensitive, then the browser asks for permission. Even then it doesn’t have access to nearly anything that a native app can access.

That's a good question. I'm not entirely sure of the answer to that. I suppose in a way it could be less secure because the dev could just decide to one day make the wefwef.app url into a malicious link. But at the same time, I don't think a browser is granted as many permissions by default.

Using the Google Play Store as an example, there are still incredibly sketchy/suspicious apps on there even though they are approved by Google.