My understanding of WebGPU isn't that it was adopted over Vulkan due to security issues but because Apple (who essentially designed it) doesn't want to touch anything related to Khronos due to some litigation between them. Which is probably why WebGPU is made under W3C instead of Khronos (who made WebGL).