That's the reason I have webgl disabled even though I'm on Windows with a supported driver. It opens a gaping security/DoS hole without any benefit (do you ever see webgl used in any website?)