As I understand it, WASM binaries have a well defined interface and can easily be sandboxed. Perhaps there would then be a way to just download WASM binaries f

As I understand it, WASM binaries have a well defined interface and can easily be sandboxed. Perhaps there would then be a way to just download WASM binaries from the web and run them locally, with your own sandbox restrictions imposed on them. I think the ability to sandbox these applications (even if they're not delivered over the web) might actually be the more valuable aspect of WASM.