No, they aren’t a hybrid. There is no such thing as a “RISC” back end. These are not chips with some sort of instruction translator that translates to pure risc instructions and then sends them to a risc CPU. The microcode instructions do not solve CISC’s problems, and the microcode instruction stream is not at all RISC. CISC complexity is found throughout the entire pipeline, in every unit. Nobody who actually designs CPUs would describe x86 chips as anything other than CISC.
And ARM is truly RISC. The RISC philosophy has nothing to do with the number of instructions, but with the complexity of instructions, where complexity is defined in a very specific way (only read or write to a register except for limited LD/ST instructions, no variable length instructions (though multiple fixed instruction lengths are permissible), no complicated memory addressing, etc.
I designed chips at AMD, Exponential (PowerPC), Sun (SPARC), etc. Nobody I ever worked with would consider calling ARM CISC or x86-64 RISC (or “hybrid”).