Isn't the
Simple Python Keylogger already able to record mouse-clicks and taking a snapshot in each instance? I'm sure if an open source keylogger is up to the job any malicious keylogger should be able to do so as well.
The OSD keyboard can be defeated. But simple, off-the-shelf pluggable keyloggers, only record keystrokes. This isn't intended to be a replacement for real security, it just raises the bar a tad for what an attacker needs to attack you.