Researchers have shown how attackers could trick voice assistants.
https://nakedsecurity.sophos.com/2018/05/17/alexa-siri-and-google-can-be-tricked-by-commands-you-cant-hear/