> This won’t protect against somebody who is willing to open the device up and probe the embedded DisplayPort (or whatever standard) pins

Much easier: a webcam with a telephoto lens hidden in a lighting fixture.