> This is very easy to verify yourself with a network monitor.

Are you sure? Suppose, hypothetically, I was looking to circumvent this.

It would be extremely easy. I could monitor for key phrases (e.g. bomb, terror, NSA, freedom.) and then simply wait until the next "alexa" to send that recording to Amazon.