This makes me wonder, does the "hey Siri" recognition happen on the phone or on their servers? If it happens on the server does that mean that it's secretly uploading a recording of everything I say?
You also need to opt-in: it's turned off by default and can be enabled by going to Settings > General > Siri > Allow "Hey Siri."