I agree. I think fixing the keylogging issue should be possible without dumping the entire architecture. Perhaps the new X11 fork https://x11libre.net will achieve that? At least, it's encouraging to hear it's getting maintained.

Regarding (recent) supply chain attacks, Linux needs to take supply integrity and sandboxing more seriously. The tools to do so are there (e.g. Nix and firejail/bwrap) and, unlike Wayland, they play well with existing software.