> Further, having a language and runtime designed for safe use is absolutely critical, and trying to embed another runtime (js/wasm) and manage to lock it down successfully, is a much larger undertaking than I think folks realize.

For what it’s worth both Deno and workerd from Cloudflare give you starting points to run JS in a very locked down sandbox.