[bobbyskelton41]

I think the xz disaster would be a reason why Wasm-based plugins would be bad. People would be forced to use plugins written in a language they may not know and would not be able to audit for themselves.

[yunohn]

A WASM setup should completely sandbox the plugin so even with malicious code, it would not have access to anything sensitive.

[habitue]

Depends. if the editor is given permission to edit files, like say, many people do `sudo helix` when they want to edit some system config file, you could imagine a rogue wasm plugin doing a lot of harm.

Sandboxing isn't magic, if you need the permissions to do something, then the things in the sandbox get access to them.