When qrexec_client cannot write to its stdout, this doesn't necessary mean that there is no data in opposite direction. Simple example is RPC service: when process in destination VM closes its stdin, it can still send some data to triggering VM.