I was trying to come up with a reasonable solution this. I wouldn't trust any software solution in the OS that "disables" the camera because even if hacking of the device is not possible, some sort of settings-phising might be.
It seems that the only way to deal with this, would be to have a hardware switch that disables the camera, e.g. like iPhone's mute toggle.
But the OS can still get hacked to ignore the state of your toggle. E.g. the iPhone’s mute toggle doesn’t stop the alarm clock from using the phone speakers.
It seems that the only way to deal with this, would be to have a hardware switch that disables the camera, e.g. like iPhone's mute toggle.