That&#x27;s not problematic at all. If I want the thing to run, I&#x27;ll whitelist it and move on. Constant false positives would probably be a bad thing, sure, but any user advanced enough to be installing a keylogger deliberately is probably advanced enough to know the difference.<p>The alternative is that we <i>don&#x27;t</i> see when a keylogger is being installed non-deliberately, and that would be worse IMO.