With the basic permissions the keyboard can only type, it has no capability to send the keystrokes out to the internet or store them where they could be sent.

With the basic permissions the keyboard can only type, it has no capability to send the keystrokes out to the internet or store them where they could be sent. If you don't trust the keyboard developer to not be an idiot with your keystrokes, better to not give that access.