World of EUC

This covers a lot of it <https://docs.citrix.com/en-us/tech-zone/learn/diagrams-posters/daas.html>

image.png

yes they do
<https://docs.citrix.com/en-us/tech-zone/build/tech-papers/citrix-communication-ports.html#citrix-daas>

Is it possible to only allow clipboard redirection from an intune managed client only?

You might want to try the #citrix-dass channel. This was for a community  initiative for a shared citrix cloud tenant. 

Just so everyone knows this was a community channel for a community project and will be archived. 