From what I remember basically every plugin attempt in those days (Java, flash, activex, etc) were all a dumpster fire when it came to security.

WASM saw that and decided to make security priority number one from day one.