"There's no reason for any script ever to apply to the screenlocker, and it should especially not be possible for it to make other content shine through." from kwin-tiling's issue titled "Screen locker is tiling" (https://github.com/kwin-scripts/kwin-tiling/issues/244)
Marking as Critical as this is quite security-relevant.
As Nate wrote previously "this is quite security-relevant", isn't it? Why has severity of this issue been lowered?
It is absolutely not security relevant in any way. A script that can move a screenlocker can also just unlock the screen. It's open because it's one less path to have accidental mistakes for 3rd parties, and something we can change but it is not a bug.