I don't see how WebUSB makes that risk worse. At least I avoid making it easy and running somebody's firmware updater on my computer.