this is equally scary and inevitable

it will be WASM-containerized in the future, but still