I am really hoping the mobile platforms like iOS offer pure wasm sandbox APIs for this use case. This could be a powerful way to support programmability, app extensions, etc outside of the appstore. It could appease both Apple for security and developers for flexibility.
proponents of wasm claim that the wasm sandbox was designed with security in mind from the very start. From apple point of view they could offer a runtime with very specific and limited permissions and trust that the plug-ins will respect them.
