I checked--if you have turned 5x-shift sticky keys off, you don't get that window when locked, defeating this exploit. So that would be a good workaround. Many users turn it off!