Web assembly trashes that idea of transparency.
Also, maybe bluetooth and USB devices don't need to be on the net.
Also, maybe bluetooth and USB devices don't need to be on the net.
Only if you believe minified JS is significantly easier to audit, which seems rather unlikely.
In both cases, the thing which works is securing the capability rather than the code. Having generic USB support is risky but e.g. having mediated access to cameras and microphones has been fine.
I find it highly unlikely we are going to be able to trust "mediated" access.