As I have said many times, a good intentioned program with a bug only needs bad intentioned data. A malicious PDF file is enough to break havoc with a simple m

As I have said many times, a good intentioned program with a bug only needs bad intentioned data. A malicious PDF file is enough to break havoc with a simple memory bug, so unless you claim that open source is also bug-free, or that you don’t use any external data (but visiting this site already invalidates that assumption), then you are just being naive. There is nothing inherent that couldn’t work with Wayland - there is nothing preventing the relevant teams agreeing on a new interface to broadcast accessibility information to the wayland server, that can thus share that with specific accessibility software (which is explicitly permitted to do it).