I missed the 'main discussion' post so I'm glad to see this one. I purchased a HP laptop[1] a few months ago and sure enough the files mentioned in the article exist on my system. I followed the steps outlined and looking at the log file, I do not see any sensitive info, function keys are working and the log file didn't come back. I did get a prompt to run the HP recovery manager app but I declined.
My guess is that the the developer's main intention was for the driver to react keystrokes , rather than malice. But they definitely should've avoided writing all the keystrokes to a log file located under the user's home directory.
