Pressing the home button on mobile in this scenario leaves the app open in the background with the page still opened. Worse yet, both Android and iOS show thumbnails of apps in the switcher, and it's an MRU so the last used app will be the first one you see if you bring up the switcher. And bringing up the app switcher is very likely to be the first action the attacker would do to see what the victim was doing just now.