> If I'm running a malicious application, I have much bigger worries than a an injected sudo. It has access to all my files! If you practice sandbox hygiene on

> If I'm running a malicious application, I have much bigger worries than a an injected sudo. It has access to all my files! If you practice sandbox hygiene on linux (eg. bubblewrap) the only files it will have access to are the ones absolutely necessary for its functioning such as a private /home/user per application. However if you use X11, all such measures will be useless. You could of course run nested X11 (eg. Xephyr). But the inconvenience is of such magnitude why not use Wayland?