from phoronix:

    Noted changes with XLibre 25.0 include:
    a) Xnamespace extension: a novel approach for isolating clients from different security domains (eg. containers) into separate X11 namespaces, where they can't hurt each other

that seems significant, I wonder why xorg hasn't implemented something like it so far.