I use ssh -X [1] since it runs the application as an untrusted client, not able to interact with or manipulate or sniff from other windows. ssh -Y is the truste

I use ssh -X [1] since it runs the application as an untrusted client, not able to interact with or manipulate or sniff from other windows. ssh -Y is the trusted equivalent. Might I assume that the approach in the article gives processes in the container full access to one's X11 session and contents? [1]: SSH X11 forwarding