Hector Martin

AFAICT the mics are TDM mics in a stereo config (shared data line, idling at average of ~1/2 Vcc, don't have scope with me to check). That's connected to a single AND gate (SN74LV1T00 or equiv), the other input comes from the mute switch.

When the mute is engaged, the output of the gate drops to 0V, and that is what goes to the SoC (after a divider, the SoC is probably 1.8V logic while the mics/AND are at 3.3V).

I traced the path from the hardware switch, through a filter/debounce network, to the AND gate, and from the mics to the AND gate. So unless there are backdoor buried traces that bypass this (which would be hard evidence of a backdoor, since they would make *no sense*), it's safe

Does the SoC have other sensors that can be used as mics, though?

Like what? The speaker is behind a power amp, it can't backfeed.

Accelerometer perhaps?

It doesn't have an accelerometer, why would it? That makes no sense, the thing is supposed to sit on a table.

I figured they might use the same SoC that's used in other places where you do want an accelerometer, but don't know. That's why I was asking.