X has trusted on non-trusted clients. The problem is that non-trusted clients were not allowed to use some important extensions such as Xrender. This could be changed though and largely solve this problem. Of course, apps of the same user are not sandboxed against each other on the system level on Unix, so this only helps if you also do this.