Thanks for playing!
The locked cursor detection issue has been fixed in v0.1.4!
The Esc key indeed leaves both Locked cursor and Fullscreen mode as a safety measure in web, so as you said, I will remap the menu to TAB (maybe preserving Esc in standalone build only).