Electron apps can already access the host OS, spawn child processes:

https://github.com/martinjackson/electron-run-shell-example

Surely it wouldn't be any more of a security than a native app, since this hypothetical Electrasm would itself be a native app?

Depends on how well the sandboxing it set up, I suppose.