Uh huh.
Just like how the North American Government was sued for doing exactly this, on a mass scale and usually outside of the law?
Naivety like this is exactly why companies and governments keep getting away with this sort of thing… Apparently ignorance is bliss after all.
And yet the last couple of years have shown just how inaccurate such a statement is… Numerous projects (Open and Closed Source) have had their code modified by governments and intelligence agencies around the world (notably by the governments of the “Five Eyes”) - yet how many times did the developers notice and/or how long before they noticed?
I don’t doubt that Mycroft would notice eventually (hopefully sooner rather than later) - but any delay in noticing such a modification to their source code is too long, when you’re talking about a device that can capture so much data…