Is it just me or... why not prevent apps from reading the copy/paste buffer without specific user consent (or at least make that an option, I can understand/imagine there might be some specific instances where users want automatic pasting of the buffer, though I’d guess that would be a small minority)?
Telling me an app is being naughty is good - but preventing them from being able to be naughty in the first place is better, surely?