Apple could require the paste dialog before the clipboard was accessed.

Complicated buffer access would require an "allow" dialog.

I am probably oversimplifying things.