If audio can leave the device, eventually it does. So treat every connected mic as live and fix it at the architecture level: hardware mic cutoffs, on-device processing, no cloud endpoint. Trust is not a security model. Physics is.