This IPC is a custom built IPC that has no security. This means that any program can do stuff like steal focus or drive other window manager policy if the plugin is there. There is also a plugin that exposes the ability to send key or mouse events.
Applications should just use DBus instead of creating their own custom IPC protocols just because they feel like it.