You might be specifically talking about Wayland here then, but with X on the other hand, it's not difficult for example [0]

[0] https://security.stackexchange.com/questions/170596/is-it-po...