https://www.cnbc.com/2019/01/29/how-to-disable-facetime.html

There's a massive privacy bug on iPhones that lets people call you with FaceTime to hear you and see you — even if you don't pick up the call.

Here's the gist of how it works: Using the bug, someone can listen in or see you through your iPhone.