Comment by harporoeder

There is the X11 security extension but as far as I understand this only isolates X clients into two domains. Untrusted apps cannot keylog / screenshot your trusted applications, but every untrusted client can keylog / screenshot any other untrusted client. If every client is untrusted this is pretty much useless. If there is a method other than running a dummy xorg server for each application I am very interested.