Because WASM supports capability based security and thus never trusts code to do the right thing. Unlike every single one of it's predecessors.
And even then the security stuff is based on previously existing work in the cloud space. Which has existed for some time but is not widespread.