The claim was "constantly recording every conversation within its field of reach", not if commands after "OK Google" are send to Google servers. For the commands Google's terms-of-service allow (themselves) to use data to improve any of their products and that includes personalization (advertising), so I doubt such a firewall exists.