When I think of bad guys with cameras, I think of Airbnb scams and the like hiding cameras in a home/office/etc. When they have physical access to the camera, there's a million ways to disable the light ranging from nail polish to opening it up and rewiring it.

I wasn't even considering remote attackers, but I'd imagine it's not a large step from [compromising a remote camera such that you can remotely record] to [compromising a remote camera such that you can control other software features while remotely recording].

I admit this update does make it a bit more difficult (for now?) for remote hackers to secretly record people; I'd be interested to see how prevalent that is compared to people actually just recording people with their own cameras.