Nor does anything about WASM. The sandbox is provided externally. The only difference is that Java standardizes functions for things like file access, while WASM doesn't standardize them (but WASI does!)