It appears to have the display functionality of swaybar, the default dock of Sway.

No, you can’t prevent open source software being mirrored, nor can you can compel citizens and companies of other countries to stop working on it.

Must be completely unrelated.

In 2004, Munich, Germany led the creation of LiMux and switched the city to that from Windows.

In 2017 they reverted to Windows.

In 2020 they re-asserted the intent to switch to open source.

What’s old is new again.

This was downvoted, but is a good question.

If your account is compromised, the shell init code could be modified to install a keylogger to discover the root password. That’s correct.

Still, that capture doesn’t happen instantly. On a personal server, it could be months until the owner logs in next. On a corporate machines, there may be daily scans for signs of intrusion, malware, etc. Either way, the attacker has been slowed down and there is a chance they won’t succeed in a timeframe that’s useful to them.

It’s perhaps like a locking a bike: with right tool and enough time, a thief can steal the bike. Sometimes slowing them down sufficiently is enough to win.