It is interesting. If it's known which bus the camera is in, why continuously deliver power to it? There must be some reason as to why it's a bad idea to constantly power buses as needed. Then again, that's how removable devices work, so?

    "while you’re apparently not allowed to directly interact with that LED light through approved APIs, if you’re a malicious user you can totally get away with it."

I'd like to see evidence of this on any Mac made in the last 10 years.