Assuming you're talking abouut Windows: that assumes that the keylogger could get control of the browser or mail package. This cold happen as the result of a flaw in implementation of the same, but there's a difference between an obscure flaw which gets patched, and an OS which has no security at all by design. If you're talking about maemo: yes.