I wonder if any of those permissions could be used to give the app access to raw touch screen data. In theory only system drivers should be able to. If possible

I wonder if any of those permissions could be used to give the app access to raw touch screen data. In theory only system drivers should be able to. If possible, it would pose a huge security risk: raw touch screen data reveal where the user taps before the data is sent to any security layer, so that by simply matching the coordinates to the known shape of the virtual keyboard, a malicious app would easily find text, including all passwords.