Does WASM have built-in I/O? If not, all that a decoder would be able to do is to decode into a buffer.

All WASM can do is transfer bag of bytes between module runtime and host. So yes, so yeah it can just decode into a buffer. Even you use wasm components to give it I/O, you can still make these go to buffer.