~/.xprofile

I agree in a little way to what you say, but if you can write .xprofile you can with no work escalate from the x socket.