> By construction, WasmEdge has a greater threat model vs rootless containers.

Yes — this argument makes a lot more sense to me compared to “kloc of C/C++”.