This seems like an area where regulations would be helpful. All persistently internet connected mobile devices with cameras must have one hardware activated status LED per camera, visible to the user. Same should go for microphones actually.