One's a settlement with a blanket denial of guilt for Siri and Google Assistant. At least mild circumstantial evidence, because there's a real mechanism (accidental activation and recording) is identified, but no proof, and certainly no proof of an ongoing intentional data broker style program. But at least enough of a pain that they won a settlement. So that counts as a trace of meaningful circumstantial evidence.
But the second one is just a link to sell you a product that doesn't provide any evidence whatsoever and doesn't even pretend to, it discusses the possibility in vague generalities as something hackable and tries to sell you a product. I'm baffled as to why you think that counts as a source.