also someone mentioned that you can use wasm for approximately equivalent performance to C, but safely in an os kernel because of aforementioned sandboxing, and that kinda blew my mind a bit