I don’t understand how WebAssembly compares with Kubernetes. It seems like WebAssembly is a nice replacement for JVM / CLR but it does not provide standards for service orchestration.
Even so, the scope is different. I don’t use WebAssembly to define networks. Limiting privilege within the WebAssembly runtime is weaker than limiting it at the OS namespace.