Very few developers, yes, but shipped to very many end users. As it turns out WASM was used as a springboard for a pretty nasty exploit chain to get persistent root on Chromebooks (responsibly disclosed and fixed, thankfully.)