To add, certain concerns still stand since the Web crypto API is extremely limited in capabilities (Example it doesn't support secp256k1).

However on the bright side performance.now() has a much worse resolution on most browsers, making timing attacks harder.