At minimum, collecting voiceprints should come with much stricter consent, retention and security requirements than ordinary "training data"