nevermind the paper is stupid and not saying there are way of breaking out of the wasm sandbox. It's simply saying if your WASM code was generated from C/C++ code that contain undefined behavior it might still do unexcepted things but those thing does not include breaking out of the sandbox.