It means that a bug in the compiler/optimizer could allow WebAssembly code to escape its sandbox.

This is a real issue, but o some extent this extra attack surface is mitigated because vendors are reusing JS compiler backends that are already part of the TCB.