They don’t need to read the keystrokes, they need to read what’s in the input box. In programming terms, you’re evaluating the field in real time, you’re not waiting for the “send request”, nor are you keylogging, otherwise the existence of the field would be irrelevant.