By the same token, if you run a binary executable, you are knowingly using a piece of software that has, and has always had, the default behavior of autoloading

By the same token, if you run a binary executable, you are knowingly using a piece of software that has, and has always had, the default behavior of autoloading any dynamic libraries, running any unprivileged machine instructions, making any unprivileged system calls, and having access to all the appropriately mapped memory it might find or obtain. So you could conclude that my program can do whatever it wants within those constraints, and it's your problem as a user if it does something you don't like. But I don't think it is fair to expect normal people to analyze a program for malicious behavior before running it. And I don't see how it is relevant whether that program is a compiled binary or a spaghetti blob of html, css, javascript, and web assembly. Also it is not clear that such analysis is permitted by the draconian copyright laws.