You don't need a some third-party thing, you can create the profile yourself using the Apple Configurator. Agree that this should be an easily accessible system setting like OP suggests.
The configuration to allow listening at all (to start Siri by code phrase) is opt-in during device setup. While I would like to see a checkbox for allowing human review of Siri messages also, at least there is a way to _opt out_ - something most mobile devices simply do not have.