Oh absolutely, but if I were targeting Zuckerberg this would now be a camera he carries with him and almost always has an available network connection (If I were a billionaire I'd be switching devices near constantly to stave off attacks). You could be carrying around the bug for at least a year if not more.

Your average blackmailer would be better off with the separate camera route (and likely wouldn't be sophisticated enough otherwise) but a state-sponsored attack could probably pull it off.