[JohnHaugeland]

1. Collects all keypresses 2. Sends them over the network

Yes, actually, it is. Besides, the tracker explicitly points this out as a possibility.