> Nothing is stopping it from using your camera, without your knowledge

The app needs to be open and in the foreground for it to take photos. On Android at least.