Security hole:
You go to log into, say, your bank's website.
The bank sends a 6-digit security code to your phone.
You subvocalize it so you can remember it long enough to type it into your laptop.
Someone is listening through your already-compromised microphone.