Study reveals widespread silent keystroke interception

Really. What the hell
The researchers built a custom web crawler and tested 15,000 websites from across the internet. They discovered that 91 percent of sites used event listeners in some way. While most were used for basic functions like tracking page loads or clicks, a significant portion were used to monitor typing
That answers a lot of questions.
When typing becomes tracking: Study reveals widespread silent keystroke interception - Help Net Security
Researchers reveal website keystroke tracking that captures what users type, even without form submission, raising privacy concerns.

Misconceptions about VPN's
A quick note on VPN's that I believe are relevant
- A VPN only hides your IP address
- It does not stop metadata leaving the device you are utilizing
- Nor does it stop any other metadata leaving your device, like your actual location (your IP address may say you're in San Diego, but your location says you're in Perth, Australia). This one is a tough to solve.
- Yes, you can use Split VPN, in other words you can send your browser through the VPN and everything else goes the normal route
- If you wish to learn more on the subject, I suggest you procure an egress firewall with the ability to generate pcap files for analysis in Wireshark.
Fun isn't it.
#enoughsaid