Run xeyes.

The eyes will only be able to track your cursor over apps running under Xwayland, additionally it also shows the terrible security...