And it's pretty simple to see when an app is doing audio recording (there's even an indicator in the corner of the screen on newer androids), what is being processed, what is encrypted and with what keys, and then decrypted, and what is being sent and received.
It's a computer program, it's not magic, you can take it apart down to individual system calls, and with popular apps, people actually do that.