"Wayland’s predecessor, X11, does not support GUI isolation, allowing all windows to record screen, log and inject inputs in other windows, making any attempt at sandboxing futile. While there are options to run nested X11 sessions such as Xpra or Xephyr, they often come with negative performance consequences, are not convenient to set up, and are not preferable to Wayland. You should avoid desktop environments and window managers which only support X11."
It occurs to me that the parts of Wayland that don't work like X11 are actually due to Wayland not having those glaring security gaps.
https://privsec.dev/posts/linux/choosing-your-desktop-linux-distribution/
"Wayland’s predecessor, X11, does not support GUI isolation, allowing all windows to record screen, log and inject inputs in other windows, making any attempt at sandboxing futile. While there are options to run nested X11 sessions such as Xpra or Xephyr, they often come with negative performance consequences, are not convenient to set up, and are not preferable to Wayland. You should avoid desktop environments and window managers which only support X11."
It occurs to me that the parts of Wayland that don't work like X11 are actually due to Wayland not having those glaring security gaps.