[3jckd]

I was trying to come up with a reasonable solution this. I wouldn't trust any software solution in the OS that "disables" the camera because even if hacking of the device is not possible, some sort of settings-phising might be.

It seems that the only way to deal with this, would be to have a hardware switch that disables the camera, e.g. like iPhone's mute toggle.

[layoutIfNeeded]

But the OS can still get hacked to ignore the state of your toggle. E.g. the iPhone’s mute toggle doesn’t stop the alarm clock from using the phone speakers.

[3jckd]

Maybe I didn't make this clear but by hardware I meant literally physical switch, as in e.g. power delivery through the circuit.