The fact that Microsoft's new Recall thing won't capture DRM content means the engineers do understand the risk of logging everything.
They just chose to preference the interests of corporates and money over people, deliberately.
@daedalus my guess is that it just uses the usual screenshot apis for that and any drm content just renders as a black screen there anyway because it doesn't go through gdi/win32k to be rendered at all