Some attacks shown on the video (like the "silent" voice recording) are initiated by the people in the video manually running those commands via SSH.

This is the major issue with this video: It mixes stuff done by LG (ACR) with stuff done via rooting (audio recording). And now people think LG is 24/7 recording your conversations and uploading them somewhere. This has not been proven.