Isn't it rather about data leaks between any two processes? Whether those two processes belong to different users is a detail of the threat model and the OS's s

Isn't it rather about data leaks between any two processes? Whether those two processes belong to different users is a detail of the threat model and the OS's security model. In a console it could well be about data leaks between a game with code-injection vulnerability and the OS or DRM system.