What is sh and why is it asking for access to all my keystrokes across all apps after Catalina upgrade?

My router is a piece of junk $300.00 Linksys with A/C which has always had intermittent connectivity issues. I bought it because it said Cisco on the packaging and after the sale I found out Cisco sold Linksys because they were an extreme budget brand using low quality parts and undercutting Cisco quality. I have called their support line several times and they were as unhelpful as they possibly could be. I am not confident that if they replaced the router I would get a good one, usually they send a refurb that has even bigger issues (only one of which they may or may not have fixed). Some things you can't buy cheap or refurb, but I am still miffed how I got taken for a $300 "Always-On" brand new router that I needed to count on, that I have to reset once a day. But as an artist I can't afford new equipment whenever I want (and sometimes even when I need) it.

I plan on building a Pi based dedicated hardware VPN server, but note that VPN is not always an answer. Nord has been hacked and kept it to themselves a long time. It is hard to trust anyone, these days, certainly not corporations.

I don't think that any shell should have access to all keystrokes, and certainly not across all apps systemwide, and certainly not 2nd life, either, @Bradley. I may be wrong, but that is why I am posting here to check that out.

My son had this computer at high school, so I think someone probably managed to install a key logger on it before the Catalina upgrade and Catalina is simply bringing it to my attention. My son is super smart and has a full ride at college. I wish I was as smart as he is. So I think someone may have tried to use a key logger to cheat off his papers & essays?

I wonder if there is a way to replace the sh with the stock version from Catalina and see if that works without any such permissions? As a graphic artist and UX guy, I do not require a shell often, if ever. Then again, I would think that the install would've included a new sh. So, now I am curious what would be up.

One possibility is that there is a sh based virus or security program? But I am worried if no one knows anything about it and will not give it that permission until I hear a reasonable explanation, nevertheless.

The only other thing I have with that privilege is OBS, but it needs it to have that permission to record my display no matter what app I am in and still have control, and even the hot keys are a big bonus.

Thanks, @Kappy. Thanks for your input as well, @Bradley, that's something to watch out for.

Thanks, Guys! -SD