Clearly you don’t know the first thing about Wayland. If you run an application without a sandbox, of course it can execute commands. That’s just common sense. Qt themes are also kind of an application. Now that’s where the fault lies, not with the protocol applications use to interact with the compositor (Wayland).