[gnode]

It's relative. ring 3 / the hardware isn't guaranteed to be free of vulnerabilities either.

What probably has the most bearing on the securability of a platform is its simplicity, which is on WebAssembly's side.