Technically possible? Sure. However, it just makes zero economical sense for them to do so. Sooner or later, they would get caught (reverse engineering, ex-employee, ...).

Now, if the device were to get compromised, it would be an entirely different story (and this is why I don't have one, despite trusting Amazon in that regard).