2. Right, Home was found to be recording thousands of times a day. Google quickly shipped a software update to disable it: that's the right damage control, and they deserve credit for that response.
But the point is that Google will happily "spy on everything I said" and not notice. Why should a random reporter have to dig through Google codenames to discover this spying? Shouldn't Google have safeguards in place? And see their pathetic response [1] that doesn't acknowledge the true problem at all.
Google could own these mistakes. But instead they deny their ads are ads, and characterize constant eavesdropping as "touch controls behaving incorrectly." They haven't learned a thing, and until they do, this stuff is going to happen again and again with their products.