It would be much nicer if this ran locally. That way you can say anything you want to it, without ever the possibility of someone policing it.
but yeah, the need for privacy is oddly intertwined with AI features.
Also dumping the flash* contents out with JTAG. And even better than that, physically disabling the network interfaces completely and not ever connecting the device to the Internet at all.
* = also the eMMC controller internal firmware, this is where a sophisticated implant will likely reside
It's also very unlikely that the hardware would be compromised, the government doesn't want to waste a potentially high value exploit on ordinary people. If they do, they risk having their exploit captured and exposed, and thus wasting it.