It's also possible for any software to have a keylogger. We don't really worry about that, because if it unexpectedly sends data, someone is likely to notice and tell everyone.

Voice interfaces today work like keyloggers by design, and we're just trusting them not to abuse all the data they're getting. It'd be a lot better if we didn't have to.

(I'm on board with legal protections too, of course.)