"Microsoft believes that WebGL will become an “ongoing source of hard-to-fix vulnerabilities” in its current form. "

If only they'd had the same insight with ActiveX, and all of the other attempts to turn Internet Explorer into a zero-install native application execution environment.