If (IF) A/V software is compromised by the authors or a third party, it can have very wide and deep access to the computer or device. So it would be a priority for anyone wanting to overcome a network or endpoint defense to take over A/V. As to whether this is happening, read the allegations around a number of companies.