Even if you flash your phone with a custom ROM you can not be really sure. The camera might be activated by some weird chip nobody even knows exists. I think the sand method is the only way to be sure and it is also a nice reason to go to the beach with way too many cold beers.