This feels like an area of hardware where the input/out of the networking
chips should be sand boxed with only very limited functionality. Essentially,
while it could ask for microphone/GPS information it should be up to the OS
to determine what it does and does not send/receive. If there are some funny
packets coming in the audio stream, it should at least flag as an issue to
the OS.
At least then if you run a fully free phone OS it can be stopped at the
source. Essentially how the finger print reader supposedly works on iPhones.
Just an idea but one that requires the hardware manufacturers to enable as it
can't be solved with hardware alone.