> I don't know how we got from "don't download and install random software from untrusted sources on your devices" to "let anyone with a website run code directly on your hardware. Sandboxes are impossible to breech!"

The whole point of WASM is that it's the alternative to downloading and installing random software.