Interesting that they remove the camera and mic.
Nonetheless, there's nothing preventing a system bus from reporting that a virtual device exists, even if there's no physical hardware to match. Besides, as soon as you plug a headset into the audio jack, the microphone becomes available.
When you help with some specific operation like drug trafficking you can probably limit amount of devices that you need to monitor by location. Then maybe deploy some zero cheaper zerodays there (or fivehundreddays, not everybody cares about the updates).
I agree that this is kind of paranoid talk. Maybe removing these parts does indeed help. If it does though, then I definitely wouldn't want to provide info about these modifications to the press.