Everybody has been saying this for the last 15 years.
We're going to have to put all the bad code into a Wasm sandbox.