On the trust-store aspect of this: pulseaudio should use the "feature" field when asking trust-store to verify requests, and use different enumeration values to distinguish ordinary microphone recording from voicecall recording. The respective functionality is available from trust-store today.
Taking the bigger picture into account, I would vote in favor of keeping the voicecall recording feature enabled under the assumption that the different recording types are clearly surfaced to the user.
On the trust-store aspect of this: pulseaudio should use the "feature" field when asking trust-store to verify requests, and use different enumeration values to distinguish ordinary microphone recording from voicecall recording. The respective functionality is available from trust-store today.
Taking the bigger picture into account, I would vote in favor of keeping the voicecall recording feature enabled under the assumption that the different recording types are clearly surfaced to the user.