Maybe work together with system76, they have tons of experience with this and they have lots of software that you might be able to use that is already open source.
good! i'll buy one when i can know it won't spy on me. and might i suggest (if you don't have this already) a physical off-switch, not just for the mic and cam, but also for wifi and bluetooth.