Comment by throwaway5371

you can say the same about the widget, as the website embedding the widget has access to the document's keydown