This is an issue with literally any app which has permissions for both the microphone and the internet, of which there are a kajillion.
Just because this one is arguably somewhat nefarious in its intended use, doesn’t make it any more likely to be malicious to the user…