Shader Safety

[tareksander]

When calling Device::create_shader_module, are all the safety guarantees of WebGPU ensured, or is it still work-in-progress?

Concretely, given otherwise correct usage of the wgpu API, can untrusted WGLS shader modules do any harm? Are there differences for this between the backends?

The only related questions I found are #3751, which it's unanswered, and #2792, which is basically what I want to do (a wasmtime sandbox with access to wgpu), but has not concrete answer whether the safety guarantees are ensured already in the current version.