>Meanwhile a friend of mine flat refused to even consider buying any such device, from any vendor, because he's concerned about being spied on.

I solved this problem for my HomePod by denying it outgoing internet access on my router. Bonjour-based AirPlay support works great, and if Siri somehow became activated by accident despite my disabling it on the device, nothing could be sent to Apple.