The daemon now validates the UID of connecting peers on the control socket. Connections from different users are rejected with "[daemon] rejecting control connection: peer uid {uid}".
Evidence
Peer UID validation (search for "[daemon] rejecting control connection: peer uid")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.