From what I understand, windows in XWayland are all still bound together under the same X11 process and can look at each other’s contents and inputs. According to the Arch Wiki:
Security: XWayland is an X server, so it does not have the security features of Wayland