I explained in another post why Apparmor/Selinux are not nearly as effective as the Chrome sandbox. Interesting, where can I find such post?

I'm excited to see wasm come to the browser. Yeh but it doesn't have native binding with the browser APIs nor does it have multilanguage interoperability, hence the added values of graalvm over wasm.