Yes. This was literally the concern I raised back when MS introduced this automatic zero-click bullshit and I was told I was paranoid; Microsoft would never let that happen! Now we’re here.

Dell does the same thing with some of their office keyboards. If you plug it in, you get zero-click PUP and it’s not trivial to delete.