Is there some technical evidence that this is the case? Or is there a chance that these can be configured remotely to record everything with the right permissio

Is there some technical evidence that this is the case? Or is there a chance that these can be configured remotely to record everything with the right permissions without the owner knowing?