For downloadable software there is the risk of a supply chain attack. The website is altered to provide a download with a malware-infected version of the software.

See the recent hack on CPU-Z: https://gist.github.com/N3mes1s/b5b0b96782b9f832819d2db7c668...

a mouse is an input device. most security challenges (passwords, etc.) are input via input devices. those are at a risk of being compromised. also clicks on an on-screen keyboard, etc. in fact, if u think about it, input device data (also know as telemetry - ironically, what we are trying to prevent in the first place by the logi app to do) security is a very serious potential attack vector.