Apple's very first camera accessory, the iSight camera, had a physical iris that you could open and close for privacy:

http://static1.squarespace.com/static/50271a61c4aab6c54f9af5...

I thought that was beautiful UI, since you knew that the lens was being blocked; you didn't have to trust that the software/firmware was doing the right thing.