WebGL is not a massive security or stability risk.  That security stuff was mostly paid FUD from fraudulent demos that faked data leaks.  The stability issues have mainly been avoided by not including WebGL content on non-graphics pages.