"Doesn't that mean the courts could compel you to just alter the JS payload to capture keystrokes for these folks? If not, how do you prove that to us?"
Swiss law is very clear in stating that this is not permissible, and this can be verified by checking the law itself.