JS hack with Proxy that overrides isTrusted's state in Element events to true

bypass-isTrusted.js

  Element.prototype.addEventListener = new Proxy(
    Element.prototype.addEventListener,
    {
      apply(target, props, args) {
        const h = args[1];
        args[1] = (ev) =>
          h(
            new Proxy(ev, {
              get: (target, p) => p === "isTrusted" || target[p],
            }),
          );

        return Reflect.apply(target, props, args);
      },
    },
  );

It's a POC. It most likely breaks removeEventListener so you need to write your own code for that