Or is it just buggy?
I thought wayland was supposed to improve security. Were the past 18 years a lie?
You must have heard that old chestnut about how “the weakest security link in the security chain is the user” by now. There is nothing any technology can do if the user decides to install insecure stuff. Even before today, the KDE Store prominently displayed warnings about being careful with the content.