Wasm shouldn't have any more capabilities than Javascript, it's theoretically the same sandbox with all the same underlying system access (or lack thereof). However, that doesn't mean I can vouch for the implementations.