[sounds]

It's firmware, loaded on boot and replaceable by someone with root permissions.

So it's not a trivial thing to bypass, but it's not secure. Use a sticker or post-it note if you're paranoid.

[jaylevitt]

Are you sure? A day or two ago someone on HN said that newer MacBooks had the LED wired in series with the camera's power supply.