For handheld sessions, balloon mobile access runs either through mobile-optimised browser pages, including Progressive Web Apps (PWAs), or through dedicated native casino applications. In any balloon download scenario, make sure APK files or iOS packages come only from licensed online casino operators, since unofficial repositories are a well-known malware vector.
On Android, sideloaded APKs are scanned by Google Play Protect during and after installation, though that scan does not replace checking the source. On iPhone, adding a web app from Safari to the Home Screen relies on the WebKit engine rather than a native store download.
Touch controls do help with rapid cash-out execution during an active game. The flip side is obvious: a phone in your pocket removes every natural pause, which makes session time limits more important, not less.