In fact, when activating a different input method on Android 2.3, there is a warning specific in that direction, that it does read everything you type, and therefore should only be changed if you trust the other keyboard. It is a valid warning.

In fact, I don't think that we should trust our phones at all, not specifically but only including the input method.