Once wasm 64 bit deploys more, we should migrate as much as possible to it.

That at least will make it harder to access random files and keys from disk due to the sandboxing.

Sandbox escapes are still possible, but that’s an additional level of control we can enforce.