>How strong are the keylogging concerns? An effective keylogger needs to either listen to keystrokes passively, or capture then retranslate them. Wouldn't allowing programs to assign hotkeys but not allowing them to emit keyboard events solve this issue?

That would (for me at least) break my favourite password manager KeePass, which has a Global Hotkey for "autotype" of passwords.