Java applets were massively harder to secure than an image decoder and died in a very different era.

I don't remember security being an issue with WebSQL. The big complaint was about getting locked too tightly to SQLite's implementation details.

I see the security issues with WebUSB as not wanting to step into a minefield, which is pretty different from adding one more C++ library.