This is the part where you repeat the same comment and substitute in modifying the software, opening the device and putting in listening hardware, putting a microphone under your skin, attaching a microcontroller to their outside walls to analyze vibration patterns, etc. Luckily, the world doesn't operate on pedantry. They care about removing 99% of attack vectors, the remaining 1% is covered by you being on the line. If your office permits outside recording hardware, someone 'forgetting' that their device was recording is a mishap. But if it only approves certain devices and finds out you did James Bond-level gadgetry to circumvent their measures, guess what image that'll paint on you.
There is also an approved human list. And the approved humans carry responsibility and consequence when going into the space.