Mainly defence in depth.
I have enormous respect for Fabrice but mquickjs is only a few weeks old and I'm no way near skilled enough to audit his C code!
Running it in WASM feels a lot safer to me.
At that point why not just run V8 isolates, if JS is your only guest?
At that point why not just run V8 isolates, if JS is your only guest?