Something that could have been eliminated without chucking the whole of X. A starting point is the Security extension that introduce the concept of trusted and

Something that could have been eliminated without chucking the whole of X. A starting point is the Security extension that introduce the concept of trusted and untrusted X Clients. Thew basic thing is that different clients can see those inputs because they live inside the same root window. Give each a different root window and the issue "magically" disappears.