I keep thinking about this too, everything should be containerised and you can control access to shared resources like the clipboard or file system with absolute certainty, even stopping certain app from access to anything.