Speaking as the engineering lead owning conhost.exe: I can't find anything in our code that would trace user input, or data effectively derived from user input, to even a
local event stream.
There are a couple instances where we trace API call timings, but only that of API calls initiated by an attached console application.