“What that means in practice is that even a kernel-level exploit would not be able to turn on the camera without the light appearing on screen.”