Haiku has run all GUI applications as root since forever, so as soon as you got RCE you could install a rogue keylogging driver silently. Obviously fixing that is higher up on the priority list than KPTI... and it's unclear when we'll get around to that, even. :(