Webp has had major vulnerabilities.

https://blog.cloudflare.com/uncovering-the-hidden-webp-vulne...

which only strengthens my argument, webp seemed like some ad-hoc pet project in chrome, and that ended like most unsafe binary parsers, with critical vulnerabilities