Why would WebSockets offer any client security beyond raw TCP sockets?
It was one of the original promises of WS and the reason that browsers offer it to client-side JS.
There are some people building on top of WebSockets with an eye towards security. Check out http://pusher.com/ for example, they designed system to account for 100% untrusted client.