Back in the 90's, some machines shipped with X authentication disabled, open to the world (SGI IRIX 5.x was one of these.) Back then, few people used firewalls. X11 keyboard sniffing was very common in some circles.
Yes, and Wayland is a pile of shit, so what's your point? Xorg has this one problem, Wayland has countless problems.
Xorg is stable and proven for decades; Wayland has been incomplete and buggy for decades.
I don't run Wayland, PulseAudio, DBUS, or SystemDumpsterFire on my system, and don't miss any of them.
I don't run strange binary code on my system either, so keyloggers aren't really a concern.
I find it ironic that people who routinely shovel foreign binary code onto their system (even automatically downloading and installing it, no less) from untrusted and untrustworthy third parties, are so all-fired concerned about these trifling imagined Xorg security problems.
Please don't do this. We ban accounts that post like this, and have had to ask you not to before.
I'm not going to ban you because you've mostly been posting good comments lately, which is cool. But comments like this do more damage than good comments add value, so please don't do that anymore.