That’s just BS. Keyloggers only need to a simple win api call (SetWindowsHookEx with WH_KEYBOARD_LL) and you are good to go. No admin rights required. You won’t get events from elevated processes, but browsers run in regular userspace so you can capture everything.
It’s not only windows. Similar things are possible on many Linux distros.