Correct, but it's still possible for the parent page to overlay invisible textboxes and buttons in order to capture input.