well if some way is found to crash wayland the attacker also gets access...

You'll get thrown to a tty login prompt.