[googillionaire]

There are other ways that could happen, too, for example a chat window or a search bar.

Change your password asap.

[gspr]

And if you're running X: any window can just decide that it wants your keystrokes anyway.

[cyberlab]

Yes that's what I forgot to mention. Windows can steal focus and you could accidentally spill secrets into them

[gspr]

With X they don't even need to steal focus. They can just copy all the keystrokes. Wayland fixes this.