The surprising part of this is that HTTPS isn't used for the requests to Siri/Google so that this is even possible without warnings / errors.