It's dismayingly easy to make an app that turns a smart-speaker into a password-stealing listening device and sneak it past the manufacturer's security checks

[McGreens]

Did you read the article?

After a long interval, the speaker then spoke in a voice that terminated the speaker’s OS, with a fake error message asking for a password to allow for a security update.