It’s one of the best ways, at least on the sandboxing front. Hard to beat Wasm at that