zlacker

Apparently the font can only embed WASM, which is sandboxed so it can't do anything except turning a buffer of codepoints into glyphs and positioning them.

Of course, back in the 1990s Java and Flash were supposed to be sandboxed. So who knows?