Wow... this is crazy stuff. I certainly wouldn't put it beyond any company to do it, but the fact that it's actually complying with a EULA that you agree to when you run the game is definitely a twist I bet no one saw coming...

"I watched the warden sniff down the email addresses of people I was communicating with on MSN, the URL of several websites that I had open at the time, and the names of all my running programs, including those that were minimized or in the toolbar. These strings can easily contain social security numbers or credit card numbers, for example, if I have Microsoft Excel or Quickbooks open w/ my personal finances at the time."