But how do we do that on the more and more locked-down computing appliances consumers gravitate towards?
One does not simply unload/delete kernel module on an iPad...
Recent versions of iOS ask for permission to use the microphone.
What if in the case of a "lawful intercept" iOS does not ask for permission?
The beauty of your comment is that just a little over half a year ago you'd be considered a complete conspiracy nut and a paranoid tinfoil hatter but today there's no one even saying anything against you.
No, an attacker can just reload it. The hardware is still there, waiting for a driver to control it.