> I block JS by default until I get at least a basic understanding what the site wants to do. So I explicitly choose not to execute their code before I have som

> I block JS by default until I get at least a basic understanding what the site wants to do. So I explicitly choose not to execute their code before I have some reason to trust the site. But then the only difference is unobfuscated wasm vs unobfuscated javascript. In both cases an obfuscation can easily hide the scary bits anyway.