It is good that it is now dead in the name of security.
That said... the potential to exploit security holes via GL library calls is, unfortunately, alive and well even with WebGL.
There are already a few projects doing exactly that.
One could even create a ActiveX compliant library, that via emscripten would be able to target WebAssembly.