Comment by steveklabnik

Neither "the app" nor "the website" (they're the same thing) are the protocol, which is what matters.

Other applications using the protocol is not "a loophole," it's how protocols work.