I would assume that that gives a similar kind of safety as running WASM normally as WASM shouldn't have a way to call the Io/os functions from lua directly