While some blacklisting has occurred to stop some player-facing client feedback from broadcasting, there's really no way to tell if something is broadcasting out or not and if this blacklisting is comprehensive enough without basically going through every single menu and command and feedback mechanism and seeing if it gets captured or not.
It would be a significant quality of life improvement if transcoder chips were changed to allow for broadcast to be turned off entirely, so nothing was ever sent anywhere and no possible security or privacy bugs could manifest that could leak anything sensitive. Alternatively, if transcoder chips were changed to be two separate devices; so that one type performed a broadcast, and another type received outside inputs.