Developers control what goes in front of the user and where, we'll still be able to tell plenty about a user's decision making process given that and how their head and hands navigate the space. There are plenty of companies that specialize in this as their entire product offering, assessing fitness for duty, alertness, attention mapping, etc. Plenty of published research on the matter as well.
The supposed security of blackboxing the eye data itself is illusory and functionally just for marketing.
The supposed security of blackboxing the eye data itself is illusory and functionally just for marketing.