Right, so it sends the commands that you give it only after it recognizes a pre-programmed word. It will likely not send up casual conversation surrounding the command, as there would not be a non-nefarious reason to do that.
False positives... But yeah they're probably rare. The real risk is that it could be hacked or national security lettered to listen permanently. The FBI has form in this regard.
