I use ssh -X [1] since it runs the application as an untrusted client, not able to interact with or manipulate or sniff from other windows. ssh -Y is the trusted equivalent.

Might I assume that the approach in the article gives processes in the container full access to one's X11 session and contents?

[1]: SSH X11 forwarding