> LXD does not provide security for that case. > (unprivileged containers do have some sort of security measure related to this by mapping the uid 0 inside the container to one that is not privileged outside the container)

it is what at least I need, it works with SW I was required to install

> X is not designed with security in mind I considered risk, I understand that there are still vulnerabilities like some software can read keyboard input from other windows, but I take this risk. BTW, for full isolation I have seen that people start a new X.org session as well.