I wonder could all WebAssembly code be shipped in secure containers and make it run similarly to how Google sandboxed the whole Android framework inside of Chrome OS?

Is the security of WebAssembly worse than that currently? Or is it somewhat similar?