They could be using idle phones as microphones, for example. They certainly have that capability, through researched and purchased 0-day vulnerabilities in iOS

They could be using idle phones as microphones, for example. They certainly have that capability, through researched and purchased 0-day vulnerabilities in iOS and Android.