A security in depth approach obviously. Run less, use vetted sources, when running suspect software execute in a properly sandbox context. Seriously what's the

A security in depth approach obviously. Run less, use vetted sources, when running suspect software execute in a properly sandbox context. Seriously what's the point of securing screenshot and key loggers if a malicious process has full access to the users home directory, auido stack, webcam and network? If you can't trust the process don't run it. If you have to run it, isolate all of it. Wayland gives you neither the freedom to safely tailor your security policy, nor the security guarantees to warrant its inflexibility.