I believe Apple's primary concern is disallowing the installation of a VM such as Flash that could be used to host applications unauthorized by Apple.
In the case of Wax, Lua is embedded in the application itself and doesn't provide a VM which can host other applications.