Just because other technologies are even worse doesn't make WebGL's security any more acceptable.

John Carmack: "I agree with Microsoft’s assessment that WebGL is a severe security risk. The gfx driver culture is not the culture of security."