True enough. They could easily push a new update that would record every single thing you say, and despite not indicating anywhere on the device, it would take a matter of minutes before it was in the news because what they certainly can't do is hide network traffic.

Right, the bigger concern for me is targeted attacks. One user, especially a non-technical user, getting a "special" update pushed out.