From the article: >WebRTC does not pose a substantially different risk than other video conferencing solutions, but the decision to include video conferencing

From the article: >WebRTC does not pose a substantially different risk than other video conferencing solutions, but the decision to include video conferencing in an application introduces a large remote attack surface that wouldn’t be there otherwise. Adding features pretty much always takes away from security. This seems to be a pretty good example of the principle.