i remember a poc that showed using the phones accelerometer as a microphone and bypassing app permissions.

if i remember correctly it was a defcon demo and the guy ended up getting hired by facebook.

That was likely Gyrophone (2014) from Stanford/Rafael researchers who demonstrated accelerometers and gyroscopes could capture speech frequencies at 80-250Hz - sufficient for speaker identification and some speech recognition without requiring microphone permissions.