This would have to be the case. You can't trust an Android device to not have anything between the keyboard app and the messaging app.