It's very different because way more users (not all users) will pick up on the fact "this website wanted to run an unannounced exe after a totally unrelated act

It's very different because way more users (not all users) will pick up on the fact "this website wanted to run an unannounced exe after a totally unrelated action, and that is bad" Than will pick up on "this website wants to use your keyboard" Your tech illiterate users fall for the former, but many people with just average technical knowledge would fall for the latter. "This website uses your keyboard directly to secure your password, press yes when presented with the dialog"