Pre login hook?

Still waiting for my replacement computer but I have some other findings which I thought I could share. I have disabled automatic logon on my Mac and are asked for password each time I resume it from sleep. This morning I did however noticed that I managed to type text into one of the widgets before I had logged in. Feels like a bit of a security hole if someone managed to utilize this "hook" correctly.