I've worked with similar systems that used local AI to process speech (to determine things like turn taking in conversations) and there was a claim that the system enhanced privacy because no speech was ever recorded, but in truth it would have been easy to compromise that privacy protection. If the ability to record or export video is not part of the sensor design, then it would be difficult for anyone to alter the chip to record video, but how do you verify that? The chip could have a secret "test" mode where it exports video and AI parameters for troubleshooting. You'd have to trust Sony, which might be reasonable in some circumstances, but not in others. The same is currently true for a variety of phones with "smart" features associated with the camera. It may seem like the phone will only unlock for you when it sees you, but what if it also secretly unlocks when presented with a specific QR code? How would you ever know?