Comment by gf000

It's absolutely trivial to make a very strict sandbox - just a simple, mathematical Turing machine is 100% safe.

The hard part is having actual capabilities, and only WASI (which is much smaller than WASM) helps here, and it's not clear why would it be any better than other options, like LiteBox. Especially that wasm does have a small, but real overhead.