On one hand, yes, new attack surface is new attack surface. But WASM has been in browsers for almost a decade now.

Without the bindings this talks about, so it really couldn't do nearly as much.