With WASM, you can't see anything. It's a complete black box. That isn't a problem in itself, as long as the only mechanisms for the black box to interact with

With WASM, you can't see anything. It's a complete black box. That isn't a problem in itself, as long as the only mechanisms for the black box to interact with anything else are well-defined and properly secured. Put another way, I shouldn't need to decompile arbitrary WASM code downloaded by some site I visit, as long it's only allowed to do anything through APIs that I'm happy with.