> * Runs using WebAssembly when in `--safe` mode

Why is safe mode opt-in?