At least for any defined set of layouts, you could infer what those other keypresses would be and compare their efficiencies. Still a compromise but it satisfies all the security issues.