Nothing should be able to hack outside of of the lock screen. That should require some crazy special permissions.
The system allows things like key-triggered screen grabs during the login password window (found this out when my 1 year old hit a bunch of keys), which already seems like nonsense.