I also worry about the increase in security surface area. A ton of additional C-level operations exposed to JS in all browsers. What could go wrong?