In risk management you have to look at the likelihood as well as the risk. A camera or mic attack are far less probable on my phone as you need many more failur

In risk management you have to look at the likelihood as well as the risk. A camera or mic attack are far less probable on my phone as you need many more failures / aligned holes in the Swiss cheese systemic risk model. Which is both by design (syncing your data unencrypted to cloud storage) and proven by the results - we see constant widespread data leaks from security cameras and the occasional one from smart speakers, and nothing comparable for iPhones or Windows PCs. For the record I have “hey siri” turned off too, though I don’t consider it particularly risky.