Please write an essay on how to attack WASM based code and how to structure your codebase to mitigate the outlined flaws.

[edit this was not snark, I believe the parent has important insights]

I believe it is possible, but the severity seems orders of magnitude less than native code.

The host controls the VM interface boundary. Native code can only get this partially via process isolation.