Android is open source but the Play Store and Play Services are closed source. If Google needed to secretly install a rootkit to listen to the microphone they could.