> If folks start compiling large amounts of their functionality into one single chunk of WASM, which has a complex interface with the DOM/JS, then I can see how these exploits could become an issue.

But unless you can break the sandbox isolation the worse you can get is what you get today with JsFuck, just faster.