> they are not really likely to be running the roomba.
You seem to assume that they have somehow physically disabled access to any kind of remote activation. That seems extremely unlikely given the overall selling points of the roomba.
The roomba doesn't have to "run" in order to be using its microphone, which as noted is likely the more valuable data acquisition source here.
Maybe read the comment I was replying to before replying with something unrealted? "I'll wage a campaign to flood the Internet with pics of your half dressed wife unless you....".
Turning on a microphone is not going to capture the required pics for this blackmail campaign.