Yes it's better to have a hardware fix, like a USB stick that moves the cursor regularly or sends a key press, or even just put your mouse on top of a watch that has hands.

There is plausible deniability. Just say my touchpad is malfuncioning and sometimes moves the cursor.

As I mentioned above, the SOC team can detect the exact process ID for these app really easily. No plausible deniability.

What do you mean by process ID? A PID seems like a useless bit of information. Now an app bundle or process executable checksum... Seems more useful. But couldn't you build the app from source and add a but of random data into the executable?

In other words, you didn't report a touchpad malfunction that was interfering with obvious and clearly stated security policies, and allowed the malfunction to interfere with your work for days/weeks/months without seeking assistance from IT?

This is not a good look, but if that's how you want to play the game of lying to your employer, fine with me!

No, because the touchpad malfunctioning has no impact on a security policy whatsoever. Not even work possibly.

If you want to lock your PC you need to lock it.