WASM isn't sandboxing, it's just a restricted target that has some guarantees. IMO this project is sort of junk as you have to use some sort of RPC mess on top of encapsulating the library when just rewriting/modifying the library to be a daemon could be simpler and not tied to $RPC/$SANDBOX_IMPL, DJB software was created like this.