Some aspects of the client isolation are used by default when doing X11 forwarding via SSH. A remote keylogger will not work for instance.