This is a significant security failure. In the "is it OK for Finale to use the mic" dialog, the implication was that Finale would only use the mic for user-requested audio recordings, but that is clearly not the case: Finale is listening all the time. (For the record, I'm quite sure Finale is not intending to do anything malicious, but that really doesn't matter.) Finale should only start listening to the mic when a user-requested audio recording starts. And it should stop listening when that recording stops.