Qubes people do have this issue solved. Wayland too, you have to opt-in to have an application steal all the keystrokes. As far as security on end user machine

Qubes people do have this issue solved. Wayland too, you have to opt-in to have an application steal all the keystrokes. As far as security on end user machines goes, there's no reason to use Docker over Podman, except for cases where one needs to run docker in docker, which is a farse in and of itself.