WASM traps on out-of-bounds accesses (including overflow). Masking addresses would hide that.