@sobeston @drewdevault Xorg (and the implementation it inherited) does an extremely poor job of using that in a way that exposes every client to one another in a way that precludes safe use across privilege domains, but this is a bad implementation choice not a limitation of the model. You can implement the protocol (I believe some Windows ones do) in ways where clients are fully isolated.