> what's to stop websites from detecting you've selected text, unselecting it, and copying the bad text in, and then reselecting it
Disabling JavaScript.
Disabling JavaScript.
Or conversely, make the visible text “pointer-events: none” and it sits in front of the dangerous text.