Do you think a hardware cutoff switch for the camera, like the Librem 5 and PinePhone, is enough to ensure privacy, or would you really want an actual built-in camera cover like is on some laptops (that presumably also kills the power since the system knows whether the camera is covered). The caveat for only having a switch being that you can’t very easily audit the circuitry to check if it’s actually turning off the camera, but the benefit being that it’s easier to implement, has fewer points of failure, and will leave more room for a bigger camera.
Also, would you want separate switches for front and rear facing cameras or are you okay with turning both of them on and off with one switch?
It would also require some software support. Definitely doable, I just don’t think there’s enough interest to actually o it. But I might very well be wrong. And thinking about it further there might already be software support for this kind of thing from the old flip phone lid switches.