xtrlock -- xtrlock does not block multitouch events

Debian reports:

xtrlock did not block multitouch events so an attacker could still
input and thus control various programs such as Chromium, etc. via
so-called “multitouch” events including pan scrolling, “pinch and
zoom” or even being able to provide regular mouse clicks by
depressing the touchpad once and then clicking with a secondary
finger.